CVE-2023-46351: SQL Injection
In the module mib < 1.6.1 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The methods mib::getManufacturersByCategory() has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46351?
CVE-2023-46351 has a high severity rating due to its potential for SQL injection attacks.
How do I fix CVE-2023-46351?
To fix CVE-2023-46351, update the Mypresta Manufacturers (brands) Images Block module to version 1.6.1 or later.
What versions are affected by CVE-2023-46351?
Versions of the Mypresta Manufacturers (brands) Images Block module prior to 1.6.1 are affected by CVE-2023-46351.
Can a guest user exploit CVE-2023-46351?
Yes, a guest user can exploit CVE-2023-46351 to perform SQL injection through vulnerable API calls.
What is the impact of exploiting CVE-2023-46351?
Exploiting CVE-2023-46351 can allow an attacker to manipulate the database through injected SQL statements.