Vulnerabilities

TI-2024-18859 CVE-2024-28396 · GHSA-hqf6-9hf3-qr68

An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to…

MEDIUM 40

An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to execute arbitrary code via the download.php component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00826 Published 2024-03-20 No fix listed CWE-94

TI-2023-24950 CVE-2023-46354 · GHSA-xccp-fvgg-92wm

In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from…

LOW 34

In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0059 Published 2023-12-06 No fix listed CWE-862

TI-2023-21615 CVE-2023-40923 · GHSA-c7r2-944q-c659

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection…

MEDIUM 41

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and save_setting parameters.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00667 Published 2023-11-15 No fix listed CWE-89

Vulnerabilities

Filters

An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to…

In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from…

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection…