Security Advisory
CVE-2024-24308
9.8
CRITICAL
Vulnerability Description
SQL Injection vulnerability in Boostmyshop (boostmyshopagent) module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php.
Published Date
February 9, 2024
Official Source
NIST NVD Advisory