CVE-2023-46989

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the…

published December 28, 2023

CVSS
—
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts() function in the productlist.php file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Published
2023-12-28T00:00Z
EPSS history
Timeline
  • 28 DEC 00:00Z
    SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the…
    cvelistv5