CVE-2023-49708
Assigner: Joomla
Published: 2023-12-14T08:51:59.913Z
State: PUBLISHED
affected: collectionURL: https://extensions.joomla.org/extension/starshop/
defaultStatus: unaffected
packageName: com_starshop
product: Starshop component for Joomla
vendor: Joomstar.com
versions: status: affected
version: 1.0.0-1.0.9
credits: type: finder
value: Sai Krishna P and Siva Pothuluru S
descriptions: supportingMedia: base64: no
type: text/html
value: SQLi vulnerability in Starshop component for Joomla.
value: SQLi vulnerability in Starshop component for Joomla.
impacts: capecId: CAPEC-66
descriptions: value: CAPEC-66 SQL Injection
problemTypes: descriptions: cweId: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
type: CWE
source: discovery: UNKNOWN
title: Extension - joomstar.com - SQLi vulnerability in Starshop component for Joomla 1.0.0-1.0.9
x_generator: engine: Vulnogram 0.1.0-dev