Updateproducts CVEs and Security Vulnerabilities

Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2023-39677

MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php.

CVSS 3.1 · 7.5 High EPSS 32.3% KEV · Not listed

Vendors

Myprestamodules Updateproducts Project

Products

Product Catalog \(csv\, Excel\) Import Updateproducts

CVE-2023-46349

In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. The method `productsUpdateModel::getExportIds()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Myprestamodules

Products

Updateproducts

Page 1 of 1.