CVE-2023-46348 Information

Description

SQL njection vulnerability in SunnyToo sturls before version 1.1.13 allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods.

Reference

https://security.friendsofpresta.org/modules/2023/12/07/sturls.html https://security.friendsofpresta.org/modules/2023/12/07/sturls.html SQL njection vulnerability in SunnyToo sturls before version 1.1.13 allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods.