Vulnerabilities

TI-2023-24946 CVE-2023-46350 · GHSA-5vr5-7v3f-j862

SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical…

MEDIUM 50

SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00611 Published 2024-02-09 No fix listed CWE-89

TI-2023-25369 CVE-2023-46989 · GHSA-8gv6-cw5x-4wvm

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before…

LOW 36

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts() function in the productlist.php file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00235 Published 2023-12-28 No fix listed CWE-89

Vulnerabilities

Filters

SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical…

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before…