CVE-2021-36748

A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract…

published August 20, 2021

CVSS
—
EPSS
15%
Percentile
96.8
In the wild
Unconfirmed
What it is

A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract data from the database via the sb_category parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15415 · 96.8th percentile
Published
2021-08-20T17:30Z
EPSS history
Timeline
  • 20 AUG 17:30Z
    A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract…
    cvelistv5