Prestashop version 1.7.7.0 are vulnerable to an SQL Injection through 'idproducts' parameter of the the 'productcomments' module. No source data...
9.8CVSS8.5AI score0.20695EPSS
SaveExploits1References2
ATTACKERKB•added 2021/01/20 1:15 p.m.•5 views
CVE-2021-3110
The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade idproducts parameter...
