cve/2024/CVE-2024-33266.md
2024-06-18 02:51:15 +02:00

721 B

CVE-2024-33266

Description

SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the DeliveryorderautoupdateOrdersModuleFrontController::initContent function.

POC

Reference

Github

No PoCs found on GitHub currently.