Csv Feeds Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:blmodules:csv_feeds_pro:*:*:*:*:*:prestashop:*:*
part: a version: * update: *
| Vendor | Blmodules (54549831-fb39-5b24-8016-e49396b507e8) |
|---|---|
| Product | Csv Feeds Pro (380033c7-5b48-5691-87cb-1e833b7d912e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | prestashop |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-46356 |
vulnerable | 2026-06-08 06:12:45.075380 |
Details available
In the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method `SearchApiCsv::getProducts()` has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.
Published: 2023-10-31T00:00:00.000Z
Updated: 2024-09-05T19:08:16.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46355 |
vulnerable | 2026-06-08 06:12:45.074781 |
Details available
In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too permissive access control which does not force administrator to use password on feeds, a guest can access exports from the module which can lead to leaks of personal information from ps_customer / ps_order table such as name / surname / email / phone number / postal address.
Published: 2023-11-27T00:00:00.000Z
Updated: 2024-08-02T20:45:41.591Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.