PT-2021-19137 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop version 1.7.7.0 Description: The store system in PrestaShop allows time-based boolean SQL injection via the id products parameter in the module=productcomments controller CommentGrade. This issue can be exploited through the...