Exportproducts vulnerabilities

2 known vulnerabilities in Exportproducts from Myprestamodules. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Exportproducts: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-45387Nov 17, 2023Myprestamodules

  In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via `exportProduct::_addDataToDb().`

• 7.5 High severity

  exportproducts: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-46346Oct 25, 2023Myprestamodules

  In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of per