Lucene search
K

The vulnerability in the open-source e-commerce web application PrestaShop relates to the lack of measures taken to protect the SQL query structure, allowing an attacker to execute arbitrary code.

🗓️ 31 Aug 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 4 Views

PrestaShop vulnerability lacks protection for SQL query structure, allowing remote arbitrary code execution.

Related
Refs
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for SQL Injection in Prestashop
26 Jul 202205:55
githubexploit
GithubExploit
Exploit for SQL Injection in Prestashop
26 Jul 202205:55
githubexploit
ATTACKERKB
CVE-2022-36408
22 Jul 202222:15
attackerkb
Circl
CVE-2022-36408
23 Jul 202202:24
circl
CNNVD
编号撤回
22 Jul 202200:00
cnnvd
Check Point Advisories
PrestaShop Command Injection (CVE-2022-36408)
27 Jul 202200:00
checkpoint_advisories
CVE
CVE-2022-36408
22 Jul 202221:07
cve
Cvelist
CVE-2022-36408
22 Jul 202221:07
cvelist
EUVD
EUVD-2022-6407
3 Oct 202520:07
euvd
Github Security Blog
Duplicate Advisory GHSA-hrgx-p36p-89q4
23 Jul 202200:00
github
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

31 Aug 2022 00:00Current
6.4Medium risk
Vulners AI Score6.4
CVSS 36.3
CVSS 26.5
4