CVE-2023-36263

Summary

CVE-2023-36263 is a new SQL Injection vulnerability affecting Prestashop's opartlimitquantity module version 1.4.5 and older. The issue lies in the `displayAjaxPushAlertMessage()` function of the `OpartlimitquantityAlertlimitModuleFrontController` class, which contains sensitive SQL calls that can be easily exploited through HTTP requests. An attacker can manipulate these queries to gain unauthorized access to sensitive data or execute malicious commands, posing a significant threat to the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.