simpleimportproduct- PrestaShop module vulnerability (CVE-2023-39675)

Modulesimpleimportproduct

Score

9.8 Critical

Date publish

20-09-2023

Versiones afectadas

  • Versions from 6.2.9 up to and including 6.2.9

Description

SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php.

References

https://blog.sorcery.ie/posts/simpleimpo...
Exploit Third Party Advisory mitre.org
https://sorcery.ie
Not Applicable mitre.org
https://blog.sorcery.ie/posts/simpleimpo...
Exploit Third Party Advisory
https://sorcery.ie
Not Applicable

Metrics

cvssMetricV31
sourcenvd@nist.gov
typePrimary
version3.1
vectorStringCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
baseScore9.8
baseSeverityCRITICAL
attackVectorNETWORK
attackComplexityLOW
privilegesRequiredNONE
userInteractionNONE
scopeUNCHANGED
confidentialityImpactHIGH
integrityImpactHIGH
availabilityImpactHIGH
exploitabilityScore3.9
impactScore5.9
Scroll al inicio