CVE-2021-37538

Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the idcategory parameter to the...

PT-2021-21697

Name of the Vulnerable Software and Affected Versions SmartDataSoft SmartBlog for PrestaShop versions prior to 4.06 Description The issue allows a remote unauthenticated attacker to execute arbitrary SQL commands. This can be achieved via the day, month, or year parameter to the...

CVE-2021-37538: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the idcategory parameter to the...