Lucene search
GitHub Advisory DatabaseGHSA-QV6H-PCF2-2W3GHistoryJul 23, 2022 - 12:00 a.m.
Duplicate Advisory GHSA-hrgx-p36p-89q4
2022-07-2300:00:16
CWE-89
GitHub Advisory Database
github.com
7
0.0005 Low
EPSS
Percentile
19.0%
Duplicate Advisory
This advisory is a duplicate of GHSA-hrgx-p36p-89q4. This link is maintained to preserve external references.
Original Description
PrestaShop 1.6.0.10 through 1.7.x before 1.7.8.2 allows remote attackers to execute arbitrary code, aka a “previously unknown vulnerability chain” related to SQL injection, as exploited in the wild in July 2022.
Affected configurations
Node
prestashopprestashopRange<1.7.8.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| prestashop/prestashop | lt | 1.7.8.2 |
Related
malwarebytes
malwarebytes
PrestaShop warns of vulnerability: Update your stores now!
2022-07-27 12:02:59
checkpoint_advisories
checkpoint_advisories
PrestaShop Command Injection (CVE-2022-36408)
2022-07-27 00:00:00
cvelist
cvelist
CVE-2022-36408
2022-07-22 21:07:56
thn
thn
Hackers Exploit PrestaShop Zero-Day to Steal Payment Data from Online Stores
2022-07-26 03:09:00
cve
cve
CVE-2022-36408
2022-07-22 22:15:08
wallarmlab
wallarmlab
attackerkb
attackerkb
CVE-2022-36408
2022-07-22 00:00:00
nvd
nvd
CVE-2022-36408
2022-07-22 22:15:08