CVE-2023-46350

CRITIQUE 9.8CVE-2023-46350 · Published 09/02/2024 · updated 17/06/2026

En bref

CVE-2023-46350 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant manufacturer or supplier alphabetical search (innovadeluxe).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.61%, plus élevée que 49.5% des vulnérabilités.
Correctif : mettre à jour vers 2.0.5 ou plus récent.

Package	Affected versions	Patched versions
manufacturer or supplier alphabetical search innovadeluxe	`< 2.0.5`	`2.0.5`

Description

SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sensitive information via the methods IdxrmanufacturerFunctions::getCornersLink, IdxrmanufacturerFunctions::getManufacturersLike and IdxrmanufacturerFunctions::getSuppliersLike.

References

security.friendsofpresta.org/modules/2024/02/08/idxrmanufacturer.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free