CVE-2024-24308

—

CVSS 3.1

9.8 critical

EPSS

<1%p50

Published

Feb 9, 2024 (Feb 9, 2024)

Modified

Jun 17, 2026

Description

SQL Injection vulnerability in Boostmyshop (boostmyshopagent) module for Prestashop versions 1.1.9 and before, allows remote attackers to escalate privileges and obtain sensitive information via changeOrderCarrier.php, relayPoint.php, and shippingConfirmation.php.

Vendors: boostmyshop
Products: boostmyshop
Ecosystems: E-commerce
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.