Security readout for executives and security teams
Plain-English summary
CVE-2023-33664 is a reported SQL injection in the ai-dev aicombinationsonfly module before v0.3.1. For an affected online shop, this could create a path to database compromise. The public data does not provide CVSS, authentication requirements, or confirmed impact details.
Executive priority
Prioritize this for any revenue-generating storefront using the module. The business risk is potentially serious because SQL injection can affect customer or order data, but urgency should be based on confirmed module presence and version.
Technical view
The reported vulnerable component is /includes/ajax.php in ai-dev aicombinationsonfly before v0.3.1. The vulnerability class is SQL injection, but the source bundle does not identify the vulnerable parameter, required privileges, exploit prerequisites, or exact database impact.
Likely exposure
Likely exposure is limited to PrestaShop environments that have the ai-dev aicombinationsonfly module installed at a version earlier than v0.3.1, especially if the affected AJAX endpoint is reachable from the public storefront.
Exploitation context
The provided sources do not show CISA KEV listing or confirmed active exploitation. They also do not include exploit code in the bundle. Treat exploitation status as unconfirmed, while recognizing SQL injection is a commonly exploited class when reachable.
Researcher notes
Evidence is sparse: no CVSS vector, CWE entry, affected CPE, vulnerable parameter, or authentication context is provided. Analysis should stay version- and component-scoped until vendor or advisory details confirm broader impact.
Mitigation direction
- Inventory stores for the ai-dev aicombinationsonfly module.
- Upgrade affected installations to v0.3.1 or later if available.
- Check vendor and Friends of Presta guidance for current remediation notes.
- Restrict access to the affected endpoint where operationally feasible.
- Review database and web logs for suspicious requests around /includes/ajax.php.
Validation and detection
- Confirm whether aicombinationsonfly is installed on each PrestaShop site.
- Record installed module versions and flag anything before v0.3.1.
- Verify /includes/ajax.php exposure from untrusted networks.
- Check web access logs for unusual requests to the AJAX endpoint.
- Confirm remediation by documenting the upgraded module version.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Database behavior lookup
The CVE wording references database injection or access, so collection and exfiltration review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2023-33664 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.