CVE-2023-39677

概要

参考情報

• blog.sorcery.ie/posts/myprestamodules_phpinfo · Exploit
• myprestamodules.com · Product
• sorcery.ie · Not Applicable

product catalog (csv, excel) import のその他の脆弱性

• CVE-2024-25847緊急 9.8SQL Injection vulnerability in MyPrestaModules "Product Catalog (CSV, Excel) Import" (simpleimportproduct) modules for PrestaShop versions 6…
• CVE-2024-25846緊急 9.1In the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from MyPrestaModules for PrestaShop, a guest can upload f…
• CVE-2023-39675緊急 9.8SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php.