CVE-2023-40923
First published: Wed Nov 15 2023(Updated: )
MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and save_setting parameters.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Myprestamodules Orders \(csv\, Excel\) Export | <5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-40923.
What is the severity of CVE-2023-40923?
The severity of CVE-2023-40923 is high.
What is the affected software of CVE-2023-40923?
The affected software of CVE-2023-40923 is MyPrestaModules ordersexport before v5.0.
How was the vulnerability discovered?
The vulnerability was discovered at send.php via the key and save_setting parameters.
Is there a fix available for CVE-2023-40923?
Yes, a fix is available for CVE-2023-40923. It is recommended to update to version 5.0 or later of MyPrestaModules ordersexport.
- collector/nvd-api
- vendor/myprestamodules
- product/orders \(csv\, excel\) export
- canonical/myprestamodules orders \(csv\, excel\) export