CVE-2023-39675: SQL Injection
Published Sep 20, 2023
·Updated
SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php.
Affected Software
2 affected components
Simpleimportproduct Project Simpleimportproduct Prestashop=6.2.9
MyPrestaModules Product Catalog \(csv\, Excel\) Import Prestashop=6.2.9
Event History
Sep 20, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-39675?
The severity of CVE-2023-39675 is critical with a CVSS score of 9.8.
2
How does CVE-2023-39675 affect SimpleImportProduct Prestashop Module?
CVE-2023-39675 affects SimpleImportProduct Prestashop Module v6.2.9 with a SQL injection vulnerability.
3
What is the affected version of SimpleImportProduct Prestashop Module?
The affected version of SimpleImportProduct Prestashop Module is v6.2.9.
4
What is the CWE of CVE-2023-39675?
The CWE of CVE-2023-39675 is CWE-89.
5
How can I fix the SQL injection vulnerability in SimpleImportProduct Prestashop Module v6.2.9?
To fix the SQL injection vulnerability in SimpleImportProduct Prestashop Module v6.2.9, upgrade to a patched version provided by SimpleImportProduct Project.