CVE-2021-3110

The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade idproducts parameter...

CVE-2021-3110: Improper Neutralization of Special Elements used in an SQL Command

The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade idproducts parameter...

PT-2020-16375

Name of the Vulnerable Software and Affected Versions PrestaShop module "productcomments" versions prior to 4.2.1 Description The issue allows an attacker to use a Blind SQL injection to retrieve data or stop the MySQL service. Recommendations For PrestaShop module "productcomments" versions prio...