Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58389
HistoryJun 30, 2022 - 12:00 a.m.

Prestashop SQL Injection Vulnerability (CNVD-2022-58389)

2022-06-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
22
prestashop
e-commerce
sql injection
vulnerability
validation
sql commands
sensitive data
cnvd-2022-58389

EPSS

0.01

Percentile

84.2%

Prestashop is an open source e-commerce solution from Prestashop, Inc. Prestashop is vulnerable to SQL injection, which results from the application’s lack of validation of externally entered SQL statements. An authenticated attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.