Innovadeluxe

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Innovadeluxe records in CISA KEV

No Innovadeluxe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Manufacturer Or Supplier Alphabetical Search 1 record MEDIUM Quick Order 1 record LOW

Records

2 records

TI-2023-24946 CVE-2023-46350 · GHSA-5vr5-7v3f-j862

SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical…

MEDIUM 50

SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00611 Published 2024-02-09 No fix listed CWE-89

TI-2023-25369 CVE-2023-46989 · GHSA-8gv6-cw5x-4wvm

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before…

LOW 36

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts() function in the productlist.php file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00235 Published 2023-12-28 No fix listed CWE-89

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0