Описание
PrestaShop SQL manager vulnerability
Impact
Remote code execution through SQL injection and arbitrary file write in back office
Patches
1.7.8.10 8.0.5 8.1.1
Found by
Truff (via yeswehack)
Workarounds
none
References
none
Пакеты
Наименование
prestashop/prestashop
composer
Затронутые версииВерсия исправления
= 8.1.0
8.1.1
Наименование
prestashop/prestashop
composer
Затронутые версииВерсия исправления
>= 8.0.0, < 8.0.5
8.0.5
Наименование
prestashop/prestashop
composer
Затронутые версииВерсия исправления
< 1.7.8.10
1.7.8.10
Связанные уязвимости
CVSS3: 9.1
nvd
больше 2 лет назад
PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.