CVSS: 7.5EPSS: 3%CPEs: 2EXPL: 1CVE-2023-39677
https://notcve.org/view.php?id=CVE-2023-39677
MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php. Se descubrió que MyPrestaModules Prestashop Module v6.2.9 y UpdateProducts Prestashop Module v3.6.9 contienen una vulnerabilidad de divulgación de información PHPInfo a través de send.php. • https://blog.sorcery.ie/posts/myprestamodules_phpinfo https://myprestamodules.com https://sorcery.ie • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-39675
https://notcve.org/view.php?id=CVE-2023-39675
SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php. Se descubrió que SimpleImportProduct Prestashop Module v6.2.9 contiene una vulnerabilidad de inyección SQL a través del parámetro clave en send.php. • https://blog.sorcery.ie/posts/simpleimportproduct_sqli https://sorcery.ie • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •