exploitDog

GHSA-876j-4j97-w5j7

Опубликовано: 17 нояб. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via exportProduct::_addDataToDb().

In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via exportProduct::_addDataToDb().

Ссылки

EPSS

Процентиль: 20%

0.00066

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-89

Связанные уязвимости

CVE-2023-45387

CVSS3: 9.8

nvd

около 2 лет назад

In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via `exportProduct::_addDataToDb().`

EPSS

Процентиль: 20%

0.00066

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-89