Lucene search
HistoryAug 29, 2022 - 6:15 a.m.
CVE-2022-22897
sql injection
apollotheme
prestashop
database exfiltration
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.085 Low
EPSS
Percentile
94.5%
A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.
Affected configurations
Node
apollothemeap_pagebuilderRange≤2.4.5prestashop
Related
prion
prion
Sql injection
2022-08-29 06:15:00
cve
cve
CVE-2022-22897
2022-08-29 06:15:08
packetstorm
packetstorm
PrestaShop Ap Pagebuilder 2.4.4 SQL Injection
2022-08-25 00:00:00
nuclei
nuclei
PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection
2023-07-13 16:54:13
cvelist
cvelist
CVE-2022-22897
2022-08-29 00:00:00
zdt
zdt
PrestaShop Ap Pagebuilder 2.4.4 SQL Injection Vulnerability
2022-08-25 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.085 Low
EPSS
Percentile
94.5%
Related for NVD:CVE-2022-22897