CVE-2021-3110

2021-01-2013:15:13

Google

osv.dev

7.9 High

AI Score

Confidence

Low

0.839 High

EPSS

Percentile

98.5%

JSON

The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade id_products[] parameter.

CPENameOperatorVersion
prestashopeq1.5.3.0
prestashopeq1.5.4.1
prestashopeq1.7.0.0-beta.4.0
prestashopeq1.7.2.0
prestashopeq1.7.2.0-rc.1.0
prestashopeq1.5.6.2
prestashopeq1.7.5.1
prestashopeq1.7.6.0-beta.1
prestashopeq1.7.6.6
prestashopeq1.6.0.13

Name	Operator	Version
prestashop	eq	1.5.3.0
prestashop	eq	1.5.4.1
prestashop	eq	1.7.0.0-beta.4.0
prestashop	eq	1.7.2.0
prestashop	eq	1.7.2.0-rc.1.0
prestashop	eq	1.5.6.2
prestashop	eq	1.7.5.1
prestashop	eq	1.7.6.0-beta.1
prestashop	eq	1.7.6.6
prestashop	eq	1.6.0.13