Arbitrary file read via SQL injection

Impact It is possible for a user having access to the SQL Manager Advanced Options - Database to arbitrary read any file on the Operating system when using SQL function LOADFILE in a SELECT request. So It can access to critical information. Patches The patch will be on PS 8.0.4 and PS 1.7.8.9...

PT-2023-22772

Name of the Vulnerable Software and Affected Versions PrestaShop versions prior to 8.0.4 PrestaShop versions prior to 1.7.8.9 Description PrestaShop is an Open Source e-commerce web application. A user with access to the SQL Manager can arbitrarily read any file on the operating system when using...