1. Home
  2. CVE Database
  3. CVE-2023-6921
CRITICAL · 9.8

CVE-2023-6921

Blind SQL Injection vulnerability in PrestaShow Google Integrator (PrestaShop addon) allows for data extraction and modification. This attack is possible via command insertion in one of the cookies.

Vulnerability Description

Blind SQL Injection vulnerability in PrestaShow Google Integrator (PrestaShop addon) allows for data extraction and modification. This attack is possible via command insertion in one of the cookies.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
PrestashowGoogle Integrator< 2.1.4

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2023-6921?

CVE-2023-6921 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Blind SQL Injection vulnerability in PrestaShow Google Integrator (PrestaShop addon) allows for data extraction and modification. This attack is possible via command insertion in one of the cookies.

How severe is CVE-2023-6921?

CVE-2023-6921 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-6921?

Check the references section above for vendor advisories and patch information. Affected products include: Prestashow Google Integrator.