Prestashop ph_simpleblog SQL Injection

SQL Injection vulnerabilty in Prestashop phsimpleblog sbcategory parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

CVE-2021-36748

PrestaHome Blog (ph_simpleblog) for PrestaShop before version 1.7.8 is vulnerable to a SQL injection (blind) via the sb_category parameter in the list controller. Exploitation could allow an attacker to extract data from the database. The issue is corroborated by multiple sources, including a ded...

CVE-2021-36748: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue in the list controller of the Prestahome Blog aka phsimpleblog module before 1.7.8 for Prestashop allows a remote attacker to extract data from the database via the sbcategory parameter...