cve/2024/CVE-2024-33266.md
2024-05-25 21:48:12 +02:00

721 B

CVE-2024-33266

Description

SQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an attacker to run arbitrary SQL commands via the DeliveryorderautoupdateOrdersModuleFrontController::initContent function.

POC

Reference

Github

No PoCs found on GitHub currently.