1. Home
  2. CVE Database
  3. CVE-2023-46989
HIGH · 7.8

CVE-2023-46989

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts() function in the productlist.php...

Vulnerability Description

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts() function in the productlist.php file.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
InnovadeluxeQuick Order< 1.4.0

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2023-46989?

CVE-2023-46989 is a vulnerability with a CVSS score of 7.8 (HIGH). SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts() function in the productlist.php...

How severe is CVE-2023-46989?

CVE-2023-46989 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-46989?

Check the references section above for vendor advisories and patch information. Affected products include: Innovadeluxe Quick Order.