PrestaShop ICOMMKT connector SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods , short message alerts and product image zoom and other features.ICOMMKT connector is used in one of the ICOMMK connector . A SQL injection vulnerability...

Sql injection

The ICOMMKT connector before 1.0.7 for PrestaShop allows SQL injection in icommktconnector.php...

CVE-2019-15565

The CVE-2019-15565 entry concerns the PrestaShop ICOMMKT connector, specifically versions prior to 1.0.7, where a SQL injection in icommktconnector.php is possible. The vulnerability is triggered in the connector code, enabling attackers to execute arbitrary SQL commands via the affected componen...