Innovadeluxe

innovadeluxe

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Quick Order

quick_order

1 CVE

Manufacturer Or Supplier Alphabetical Search

manufacturer_or_supplier_alphabetical_search

1 CVE

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-46350 1Innovadeluxe 1Manufacturer Or Supplier Alphabetical Search Jun 17, 2026 Feb 9, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sen...Show more SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sensitive information via the methods IdxrmanufacturerFunctions::getCornersLink, IdxrmanufacturerFunctions::getManufacturersLike and IdxrmanufacturerFunctions::getSuppliersLike.Show less
CVE-2023-46989 1Innovadeluxe 1Quick Order Jun 17, 2026 Dec 28, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts() function in the productlist.php file.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-46350

1Innovadeluxe

1Manufacturer Or Supplier Alphabetical Search

Jun 17, 2026

Feb 9, 2024

N/A· v4

9.8 CRITICAL· v3

N/A· v2

SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module for PrestaShop versions 2.0.4 and before, allows remote attackers to escalate privileges and obtain sensitive information via the methods IdxrmanufacturerFunctions::getCornersLink, IdxrmanufacturerFunctions::getManufacturersLike and IdxrmanufacturerFunctions::getSuppliersLike.Show less

CVE-2023-46989

1Innovadeluxe

1Quick Order

Jun 17, 2026

Dec 28, 2023

N/A· v4

7.8 HIGH· v3

N/A· v2

SQL Injection vulnerability in the Innovadeluxe Quick Order module for PrestaShop before v.1.4.0, allows local attackers to execute arbitrary code via the getProducts() function in the productlist.php file.