Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-16194 1 Store-opart 1 Op\'art Devis 2026-01-27 5.3 Medium
An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to any user's invoice and delivery address by exploiting an IDOR on the delivery_address and invoice_address fields.
CVE-2023-48188 1 Store-opart 1 Op\'art Devis 2024-11-21 9.8 Critical
SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted script to the getModuleTranslation function.