67 matches found
CVE-2023-46357
CVE-2023-46357 affects the PrestaShop Motivationsale module prior to 3.5.0. The vulnerability arises in the function motivationsaleDataModel::getProductsByIds() , which performs sensitive SQL calls that can be exploited by a guest via a trivial HTTP request to induce a SQL injection. The related...
CVE-2023-46357
In the module "Cross Selling in Modal Cart" motivationsale 3.5.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. The method motivationsaleDataModel::getProductsByIds has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injectio...
CVE-2023-45387
In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via exportProduct::addDataToDb...
Sql injection
In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via exportProduct::addDataToDb...
CVE-2023-45387
In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via exportProduct::addDataToDb...
CVE-2023-45387
CVE-2023-45387 affects the PrestaShop module “Product Catalog (CSV, Excel, XML) Export PRO” (exportproducts) from MyPrestaModules. Versions up to 5.0.0 are vulnerable to SQL injection via exportProduct::_addDataToDb(), exploitable by a guest user. The issue is confirmed across multiple feeds (NVD...
CVE-2023-45387
In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via exportProduct::addDataToDb...
CVE-2023-40923
MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...
CVE-2023-40923
MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...
CVE-2023-40923
MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...
Sql injection
MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...
CVE-2023-40923
MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...
CVE-2023-40923
MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...
PT-2023-27703
Name of the Vulnerable Software and Affected Versions MyPrestaModules ordersexport versions prior to 5.0 Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the send.php endpoint via the key and save setting parameters. Recommendations For...
CVE-2023-40923
The CVE-2023-40923 vulnerability affects the PrestaShop add-on MyPrestaModules Orders Export Pro (ordersexport) prior to v5.0. Multiple SQL injection flaws exist in send.php reachable via the key and save_setting parameters, potentially impacting confidentiality, integrity, and availability. CVSS...
CVE-2023-40923: Improper Neutralization of Special Elements used in an SQL Command
MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...
Path traversal
In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in...
CVE-2023-46346
In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in...
CVE-2023-46346
The CVE-2023-46346 entry concerns the PrestaShop module “Product Catalog (CSV, Excel, XML) Export PRO” by MyPrestaModules, up to version 4.1.1. A path traversal flaw arises from lack of permissions control and flawed pathname construction, enabling a guest to view or download personal information...