CVE-2023-46356 | BDVDB-2026-215673 Detail

Description#

In the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method `SearchApiCsv::getProducts()` has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security.friendsofpresta.org/modules/2023/10/26/csvfeeds-89.html

Exploit#

No public exploit known

History#

Version 12023-10-31Record published in the CVE List.
Version 22024-09-05Most recent update recorded in the CVE List.