Vulnerabilities (CVE)

Filtered by vendor Innovadeluxe Subscribe
Filtered by product Manufacturer Or Supplier Alphabetical Search
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-46350 1 Innovadeluxe 1 Manufacturer Or Supplier Alphabetical Search 2024-11-21 N/A 9.8 CRITICAL
SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sensitive information via the methods IdxrmanufacturerFunctions::getCornersLink, IdxrmanufacturerFunctions::getManufacturersLike and IdxrmanufacturerFunctions::getSuppliersLike.