Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8mp5-hxq8-5mcj

Опубликовано: 31 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In the module "PrestaBlog" (prestablog) version 4.4.7 and before from HDclic for PrestaShop, a guest can perform SQL injection. The script ajax slider_positions.php has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.

In the module "PrestaBlog" (prestablog) version 4.4.7 and before from HDclic for PrestaShop, a guest can perform SQL injection. The script ajax slider_positions.php has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.

EPSS

Процентиль: 20%
0.00066
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

In the module "PrestaBlog" (prestablog) version 4.4.7 and before from HDclic for PrestaShop, a guest can perform SQL injection. The script ajax slider_positions.php has a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.

EPSS

Процентиль: 20%
0.00066
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89