Lucene search
Veracode Vulnerability DatabaseVERACODE:36486HistoryJul 25, 2022 - 7:23 p.m.
SQL Injection
2022-07-2519:23:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
24
0.002 Low
EPSS
Percentile
59.0%
prestashop/prestashop is vulnerable to SQL injection. An attacker is able to execute arbitrary SQL queries on the target system via sending specifically crafted input through the vulnerable fetch and save methods which in turn call PHP’s Eval function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| prestashop/prestashop | le | 1.7.8.7-dev | |
| prestashop/prestashop | le | 1.7.8.7-dev |
Related
osv
osv
CVE-2022-31181
2022-08-01 20:15:08
PrestaShop eval injection possible if shop vulnerable to SQL injection
2022-07-29 22:27:27
github
github
PrestaShop eval injection possible if shop vulnerable to SQL injection
2022-07-29 22:27:27
cve
cve
CVE-2022-31181
2022-08-01 20:15:08
CVE-2022-36408
2022-07-22 22:15:08
prion
prion
Sql injection
2022-08-01 20:15:00
cvelist
cvelist
CVE-2022-31181 Remote code execution in prestashop
2022-08-01 19:30:16
veracode
veracode
SQL Injection
2022-08-01 14:56:25
nvd
nvd
CVE-2022-31181
2022-08-01 20:15:08
CVE-2022-36408
2022-07-22 22:15:08
attackerkb
attackerkb
CVE-2022-36408
2022-07-22 00:00:00