PT-2024-13355 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: mib module for PrestaShop versions prior to 1.6.1 Description: The issue allows a guest to perform SQL injection. The methods mib::getManufacturersByCategory contain sensitive SQL calls that can be executed with a trivial HTTP call and...