3 matches found
Exploit for SQL Injection in Prestashop
CVE-2021-43789 Prestashop = 1.7.5.0 = 5.0 AND error-based -...
9.8CVSS9.6AI score0.04626EPSS
SaveExploits2
CVE-2021-43789 Blind SQLi using Search filters in PrestaShop
PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with orderBy and sortOrder parameters. The problem is fixed in version 1.7.8.2...
7.5CVSS10AI score0.04626EPSS
SaveExploits2References3
CVE-2021-43789
CVE-2021-43789 affects PrestaShop prior to 1.7.8.2. The vulnerability is a blind SQL injection in search filters using the responsible parameters, specifically through the fields “orderBy” and “sortOrder.” The issue is fixed in version 1.7.8.2. Public references and OSV/GHSA entries reiterate the...
9.8CVSS9AI score0.04626EPSS
SaveExploits2References3Affected Software1
20