PT-2021-21334
CVE-2021-36748
·
Published
2021-08-20
·
Updated
2021-08-30
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Prestahome Blog (aka ph simpleblog) module versions prior to 1.7.8 for Prestashop
Description
A SQL Injection issue in the list controller of the Prestahome Blog module allows a remote attacker to extract data from the database via the
sb category parameter.Recommendations
For Prestahome Blog (aka ph simpleblog) module versions prior to 1.7.8, update to version 1.7.8 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾