Lucene search
PRIOn knowledge basePRION:CVE-2023-46356HistoryOct 31, 2023 - 4:15 a.m.
Sql injection
2023-10-3104:15:00
PRIOn knowledge base
www.prio-n.com
2
module
csv feeds pro
sql injection
prestashop
nvd
security
In the module “CSV Feeds PRO” (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method SearchApiCsv::getProducts() has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| csv_feeds_pro | lt | 2.6.1 |
Related
cve
cve
CVE-2023-46356
2023-10-31 04:15:11
cvelist
cvelist
CVE-2023-46356
2023-10-31 00:00:00
nvd
nvd
CVE-2023-46356
2023-10-31 04:15:11