CVE-2023-40923

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...

CVE-2024-28396

An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to execute arbitrary code via the download.php component...

PT-2024-22416 · Unknown · Myprestamodules Ordersexport

Name of the Vulnerable Software and Affected Versions: MyPrestaModules ordersexport versions 6.0.2 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the "download.php" component. Recommendations: For versions 6.0.2 and earlier, update to a version that...

CVE-2024-28396

The MyPrestaModules ordersexport module, version 6.0.2 and before , contains a security vulnerability that allows a remote attacker to achieve arbitrary code execution . The flaw is located within the download.php component. To mitigate this risk, users are recommended to update to a version that...

CVE-2024-28396

An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to execute arbitrary code via the download.php component...

CVE-2024-28396: Improper Control of Generation of Code

An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to execute arbitrary code via the download.php component...

CVE-2023-40923

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...

CVE-2023-40923

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...

CVE-2023-40923

The CVE-2023-40923 vulnerability affects the PrestaShop add-on MyPrestaModules Orders Export Pro (ordersexport) prior to v5.0. Multiple SQL injection flaws exist in send.php reachable via the key and save_setting parameters, potentially impacting confidentiality, integrity, and availability. CVSS...

PT-2023-27703

Name of the Vulnerable Software and Affected Versions MyPrestaModules ordersexport versions prior to 5.0 Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the send.php endpoint via the key and save setting parameters. Recommendations For...

CVE-2023-40923: Improper Neutralization of Special Elements used in an SQL Command

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and savesetting parameters...