CVE-2023-46350

SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" idxrmanufacturer module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sensitive information via the methods IdxrmanufacturerFunctions::getCornersLink,...

CVE-2023-46350

CVE-2023-46350 describes a SQL injection vulnerability in the InnovaDeluxe module for PrestaShop’s idxrmanufacturer component (methods: IdxrmanufacturerFunctions::getCornersLink, ::getManufacturersLike, ::getSuppliersLike). Affected: PrestaShop up to version 2.0.4 and earlier. Root cause: imprope...