NetSight
high7.5

CVE-2023-43984

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the ps_customer t…

Impact

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the ps_customer table.

Affected products

VendorProductAffected versions
Advanced Export Products Orders Cron Csv Excel ProjectAdvanced Export Products Orders Cron Csv Excel
through 4.4.7

Weakness classification

References