CVE-2024-34992

Description

SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via 'Tickets::getsearchedtickets()'

References

https://security.friendsofpresta.org/modules/2024/06/20/helpdesk.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS