← Back

Sunnytoo

sunnytoo

3 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Sturls
sturls
1 CVE
Stblogsearch
stblogsearch
1 CVE
Product Comments
product_comments
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-28388
1Sunnytoo
1Product Comments
Jun 17, 2026
Mar 14, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListc...Show more
SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListcomments method.Show less
CVE-2023-43985
1Sunnytoo
1Stblogsearch
Jun 17, 2026
Jan 19, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection vulnerability via the StBlogSearchClass::prepareSearch component.
CVE-2023-46348
1Sunnytoo
1Sturls
Jun 17, 2026
Dec 14, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods.