Lucene search

PRIOn knowledge basePRION:CVE-2022-22897

HistoryAug 29, 2022 - 6:15 a.m.

Sql injection

2022-08-2906:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

apollotheme

ap pagebuilder

prestashop

vulnerability

unauthenticated attackers

exfiltrate data

nvd

9.8 High

AI Score

Confidence

High

0.085 Low

EPSS

Percentile

94.5%

JSON

A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.

CPENameOperatorVersion
ap_pagebuilderle2.4.5

CPE	Name	Operator	Version
	ap_pagebuilder	le	2.4.5

References

packetstormsecurity.com/files/168148/PrestaShop-Ap-Pagebuilder-2.4.4-SQL-Injection.html

friends-of-presta.github.io/security-advisories/modules/2023/01/05/appagebuilder.html