CVE-2022-31101

🗓️ 27 Jun 2022 22:15:20Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 232 Views🌐 WEB

prestashop/blockwishlist extension SQL injection in authenticated custome

Reporter	Title	Published	Views	Family All 19
0day.today	Prestashop blockwishlist module 2.1.0 - SQL injection Exploit	9 Aug 202200:00	–	zdt
GithubExploit	Exploit for SQL Injection in Prestashop Blockwishlist	9 Aug 202210:29	–	githubexploit
GithubExploit	Exploit for SQL Injection in Prestashop Blockwishlist	24 Jul 202221:50	–	githubexploit
Circl	CVE-2022-31101	28 Jun 202202:35	–	circl
CNNVD	Prestashop SQL注入漏洞	27 Jun 202200:00	–	cnnvd
CNVD	Prestashop SQL Injection Vulnerability (CNVD-2022-58389)	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-31101 SQL Injection in prestashop/blockwishlist	27 Jun 202222:15	–	cvelist
Exploit DB	Prestashop blockwishlist module 2.1.0 - SQLi	9 Aug 202200:00	–	exploitdb
Github Security Blog	BlockWishList SQL Injection vulnerability	25 Jun 202207:11	–	github
Nuclei	Prestashop Blockwishlist 2.1.0 SQL Injection	6 Jun 202603:01	–	nuclei

NVD

Vulners

Node

prestashop blockwishlistRange<2.1.1

[
  {
    "product": "blockwishlist",
    "vendor": "PrestaShop",
    "versions": [
      {
        "status": "affected",
        "version": ">= 2.0.0, < 2.1.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/PrestaShop/blockwishlist/commit/b3ec4b85af5fd73f74d55390b226d221298ca084
packetstormsecurity	www.packetstormsecurity.com/files/168003/Prestashop-Blockwishlist-2.1.0-SQL-Injection.html
github	www.github.com/PrestaShop/blockwishlist/security/advisories/GHSA-2jx3-5j9v-prpp