CVE-2023-39675

SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-09-20

Last modified

2024-09-25

Weaknesses

CWE-89

Affected products

• Product Catalog (csv, Excel) Import (Myprestamodules)

References

• https://blog.sorcery.ie/posts/simpleimportproduct_sqli/
• https://sorcery.ie