Browse CVEs

HIGH 7.5 CVE-2024-28396 An issue in MyPrestaModules ordersexport v.6.0.2 and before allows a remote attacker to execute arbitrary code via the download.php component. Orders \(csv\, Excel\) Export Pro after 6.0.2 Fix from $1,9502024-03-20 CRITICAL 9.8 CVE-2024-25847 SQL Injection vulnerability in MyPrestaModules "Product Catalog (CSV, Excel) Import" (simpleimportproduct) modules for PrestaShop versions 6.5.0 and … Product Catalog \(csv\, Excel\) Import after 6.5.0 Fix from $2,3002024-03-03 CRITICAL 9.1 CVE-2024-25846 In the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from MyPrestaModules for PrestaShop, a guest can upload files with… Product Catalog \(csv\, Excel\) Import after 6.7.0 Fix from $2,3002024-02-27 HIGH 7.5 CVE-2023-46354 In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from MyPrestaModules for PrestaShop, a guest can download personal information … Orders \(csv\, Excel\) Export Pro 5.2.0+ Fix from $1,9502023-12-06 CRITICAL 9.8 CVE-2023-46349 In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop, a guest can perform SQL inje… Updateproducts 3.8.5+ Fix from $2,3002023-11-27 CRITICAL 9.8 CVE-2023-46357 In the module "Cross Selling in Modal Cart" (motivationsale) < 3.5.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. The meth… Cross Selling In Modal Cart 3.5.0+ Fix from $2,3002023-11-22 CRITICAL 9.8 CVE-2023-45387 In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest ca… Exportproducts 5.1.0+ Fix from $2,3002023-11-17 HIGH 8.8 CVE-2023-40923 MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and save_setting pa… Orders \(csv\, Excel\) Export Pro 5.0+ Fix from $1,9502023-11-15 HIGH 7.5 CVE-2023-46346 In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest ca… Exportproducts 5.0.0+ Fix from $1,9502023-10-25 CRITICAL 9.8 CVE-2023-39675 SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php. Product Catalog \(csv\, Excel\) Import No fix yet Fix from $2,3002023-09-20 HIGH 7.5 CVE-2023-39677EPSS 31% MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vuln… Product Catalog \(csv\, Excel\) Import No fix yet Fix from $1,9502023-09-20 CRITICAL 9.8 CVE-2023-26858 SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::… Frequently Asked Questions Page Patch available Fix from $2,3002023-03-31