CVE-2023-40923

Katalog CVE

CVSS 8.8 · High EPSS 0,67%

Kerentanan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') pada myprestamodules orders (csv, excel) export pro. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and save_setting parameters.

Rincian

Terbit di NVD

15 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

EPSS (30 hari)

0,67% peluang dieksploitasi; lebih tinggi dari 50,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.friendsofpresta.org/modules/2023/11/09/ordersexport.html patch · advisory pihak ketiga