Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-46354

In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can access exports from the module which can lead to a leak of personal information from ps_customer/ps_address tables such as name / surname / email / phone number / full postal address.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.9%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2023-46354
  • None » None » Version:
    _excel)_export_pro:1.0.3
  • None » None » Version:
    _excel)_export_pro:1.0.4
  • None » None » Version:
    _excel)_export_pro:1.0.6
  • None » None » Version:
    _excel)_export_pro:1.0.7
  • None » None » Version:
    _excel)_export_pro:1.0.8
  • None » None » Version:
    _excel)_export_pro:1.1.0
  • None » None » Version:
    _excel)_export_pro:5.1.0
  • None » None » Version:
    _excel)_export_pro:5.1.1
  • None » None » Version:
    _excel)_export_pro:5.1.2
  • None » None » Version:
    _excel)_export_pro:5.1.3
  • None » None » Version:
    _excel)_export_pro:5.1.5
  • None » None » Version:
    _excel)_export_pro:5.1.6
  • Myprestamodules » Orders (Csv » Version: Any
    cpe:2.3:a:myprestamodules:orders_(csv


Products
Pricing
Contact Us

Shodan ® - All rights reserved