Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-46989
HistoryDec 28, 2023 - 12:00 a.m.

CVE-2023-46989

2023-12-2800:00:00
mitre
github.com
2
sql injection
innovadeluxe quick order
prestashop
getproducts function
productlist.php
arbitrary code execution

AI Score

8.5

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts() function in the productlist.php file.

AI Score

8.5

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-46989