Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:26 a.m.•17 views

CVE-2023-43984

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

7.5CVSS6.7AI score0.00608EPSS
SaveExploits0
attackerkb
attackerkb
•added 2023/11/07 11:15 p.m.•11 views

CVE-2023-43984

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

7.5CVSS5.9AI score0.00608EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/11/07 12:00 a.m.•38 views

CVE-2023-43984

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

7.6AI score0.00608EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/07 12:00 a.m.•76 views

CVE-2023-43984

CVE-2023-43984 affects the PrestaShop Smart Soft Advanced Export module. Before v4.4.7, insecure permissions allow unauthenticated attackers to download user data from the ps_customer table due to improper access controls in the advancedexport component. Impact is user information disclosure; CVS...

7.5CVSS7.4AI score0.00608EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/07 12:00 a.m.•5 views

CVE-2023-43984: Incorrect Default Permissions

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

7.5CVSS7.2AI score0.00608EPSS
SaveExploits0References2
Rows per page
Query Builder