CVE-2023-45387

CVE-2023-45387 affects the PrestaShop module “Product Catalog (CSV, Excel, XML) Export PRO” (exportproducts) from MyPrestaModules. Versions up to 5.0.0 are vulnerable to SQL injection via exportProduct::_addDataToDb(), exploitable by a guest user. The issue is confirmed across multiple feeds (NVD...

CVE-2023-45387

In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via exportProduct::addDataToDb...

CVE-2023-45387

In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via exportProduct::addDataToDb...

CVE-2023-40923

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...

CVE-2023-40923

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...

CVE-2023-40923

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...

Sql injection

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...

CVE-2023-40923

The CVE-2023-40923 vulnerability affects the PrestaShop add-on MyPrestaModules Orders Export Pro (ordersexport) prior to v5.0. Multiple SQL injection flaws exist in send.php reachable via the key and save_setting parameters, potentially impacting confidentiality, integrity, and availability. CVSS...

CVE-2023-40923

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...

PT-2023-27703 · Unknown · Myprestamodules Ordersexport

Name of the Vulnerable Software and Affected Versions: MyPrestaModules ordersexport versions prior to 5.0 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the send.php endpoint via the key and save setting parameters. Recommendations: Fo...

CVE-2023-40923

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...

Path traversal

In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in...

CVE-2023-46346

The CVE-2023-46346 entry concerns the PrestaShop module “Product Catalog (CSV, Excel, XML) Export PRO” by MyPrestaModules, up to version 4.1.1. A path traversal flaw arises from lack of permissions control and flawed pathname construction, enabling a guest to view or download personal information...

CVE-2023-46346

In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in...

CVE-2023-39677

MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php...

Information disclosure

MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php...

CVE-2023-39677

CVE-2023-39677 corresponds to a PHPInfo disclosure in PrestaShop modules MyPrestaModules (Module v6.2.9) and UpdateProducts (Module v3.6.9) via the send.php endpoint. The NVD entry notes a CVSS v3.1 base score of 7.5 (High) with network attack vector, no privileges required, no user interaction, ...

CVE-2023-39677

MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php...

CVE-2023-39677

MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods , short message alerts and product image zoom and other features . A security vulnerability exists in MyPrestaModules Prestashop Module version v6.2.9,...