Sunnytoo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sunnytoo records in CISA KEV

No Sunnytoo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Product Comments 1 record MEDIUM Stblogsearch 1 record MEDIUM Sturls 1 record MEDIUM

Records

3 records

TI-2023-23585 CVE-2023-43985 · GHSA-h7h5-c3fr-4rj2

SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection…

MEDIUM 49

SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection vulnerability via the StBlogSearchClass::prepareSearch component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00518 Published 2024-01-19 No fix listed CWE-89

TI-2024-18851 CVE-2024-28388 · GHSA-6xfp-g425-7cw6

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5…

MEDIUM 44

SQL injection vulnerability in SunnyToo stproductcomments module for PrestaShop v.1.0.5 and before, allows a remote attacker to escalate privileges and obtain sensitive information via the StProductCommentClass::getListc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00832 Published 2024-03-14 No fix listed CWE-89

TI-2023-24944 CVE-2023-46348 · GHSA-jxxf-4j56-j82w

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to…

MEDIUM 44

SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00849 Published 2023-12-14 No fix listed CWE-89

Open these records in search →

Critical	3
High	0
Medium	0
Low	0
No CVSS	0