Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Frentzen

#42017of 53,630
6.5Total CVSS
Vulnerabilities · 1
PT-2022-11461
6.5
2022-06-15
Unknown · Peel Shopping Cms · CVE-2021-41672
**Name of the Vulnerable Software and Affected Versions** PEEL Shopping CMS version 9.4.0 **Description** The issue allows for authenticated SQL injection in the utilisateurs.php file. A user belonging to the administrator group can inject a malicious SQL query to affect the application's execution logic and retrieve information from the database. **Recommendations** For PEEL Shopping CMS version 9.4.0, consider restricting access to the utilisateurs.php file until a patch is available. As a temporary workaround, limit the privileges of administrator group users to minimize the risk of exploitation.