PrestaShop warns of vulnerability: Update your stores now!

A vulnerability affecting open source e-commerce platform PrestaShop could spell trouble for servers running PrestaShop websites. The 15-year-old organisations platform is currently used by around 300,000 shops worldwide. The exploit is very dependent on specific versions in use, so one PrestaSho...

PrestaShop Command Injection (CVE-2022-36408)

A command injection vulnerability exists in PrestaShop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Hackers Exploit PrestaShop Zero-Day to Steal Payment Data from Online Stores

Malicious actors are exploiting a previously unknown security flaw in the open source PrestaShop e-commerce platform to inject malicious skimmer code designed to swipe sensitive information. "Attackers have found a way to use a security vulnerability to carry out arbitrary code execution in serve...

CVE-2022-36408

creationtimestamp| type| source ---|---|--- 2022-07-23 02:24:46+00:00| exploited| https://t.me/cibsecurity/46844 2022-07-26 15:20:00+00:00| exploited| https://t.me/itsecnews/1072 2022-07-26 16:15:08+00:00| exploited| https://t.me/truesecator/3218 2022-07-27 11:13:56+00:00| seen|...

CVE-2022-36408

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-31181. Reason: This candidate is a duplicate of CVE-2022-31181. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2022-31181 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2022-36408

...

CVE-2022-36408

CVE-2022-36408 is rejected/not used; reference CVE-2022-31181 instead.