Lucene search
MitreCVELIST:CVE-2021-37538HistoryAug 24, 2021 - 12:45 p.m.
CVE-2021-37538
2021-08-2412:45:07
mitre
www.cve.org
3
sql injection
smartdatasoft
prestashop
remote attack
arbitrary commands.
EPSS
0.02
Percentile
89.2%
Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the id_category parameter to the controllers/front/category.php category controller.
Related
nuclei
nuclei
PrestaShop SmartBlog <4.0.6 - SQL Injection
2021-08-24 01:42:35
cve
cve
CVE-2021-37538
2021-08-24 13:15:12
dsquare
dsquare
Prestashop SmartBlog SQL Injection
2021-09-20 00:00:00
nvd
nvd
CVE-2021-37538
2021-08-24 13:15:12
prion
prion
Sql injection
2021-08-24 13:15:00