CVE-2023-39677

M

yPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php.

References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:myprestamodules:product_catalog_\(csv\,_excel\)_import:6.2.9:*:*:*:*:prestashop:*:*
cpe:2.3:a:updateproducts_project:updateproducts:3.6.9:*:*:*:*:prestashop:*:*

History

18 Feb 2026, 17:59

Type Values Removed Values Added
First Time Myprestamodules
Myprestamodules product Catalog \(csv\, Excel\) Import
CPE cpe:2.3:a:simpleimportproduct_project:simpleimportproduct:6.2.9:*:*:*:*:prestashop:*:* cpe:2.3:a:myprestamodules:product_catalog_\(csv\,_excel\)_import:6.2.9:*:*:*:*:prestashop:*:*

21 Nov 2024, 08:15

Type Values Removed Values Added
References () https://blog.sorcery.ie/posts/myprestamodules_phpinfo/ - Exploit, Third Party Advisory () https://blog.sorcery.ie/posts/myprestamodules_phpinfo/ - Exploit, Third Party Advisory
References () https://myprestamodules.com/ - Product () https://myprestamodules.com/ - Product
References () https://sorcery.ie - Not Applicable () https://sorcery.ie - Not Applicable

25 Sep 2024, 15:35

Type Values Removed Values Added
CWE CWE-200

Information

Published : 2023-09-20 21:15

Updated : 2026-02-18 17:59


NVD link : CVE-2023-39677

Mitre link : CVE-2023-39677

CVE.ORG link : CVE-2023-39677


JSON object : View

CWE
NVD-CWE-noinfo CWE-200

Exposure of Sensitive Information to an Unauthorized Actor