Lucene search

K
nvd[email protected]NVD:CVE-2023-39675
HistorySep 20, 2023 - 10:15 p.m.

CVE-2023-39675

2023-09-2022:15:13
CWE-89
web.nvd.nist.gov
3
vulnerability
sql injection
simpleimportproduct
prestashop
module v6.2.9

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

37.1%

SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php.

Affected configurations

Nvd
Node
simpleimportproduct_projectsimpleimportproductMatch6.2.9prestashop
VendorProductVersionCPE
simpleimportproduct_projectsimpleimportproduct6.2.9cpe:2.3:a:simpleimportproduct_project:simpleimportproduct:6.2.9:*:*:*:*:prestashop:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

37.1%

Related for NVD:CVE-2023-39675