Description
PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter. The problem is fixed in 1.7.6.8
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
PrestaShop PrestaShop
>= 1.7.5.0, < 1.7.6.8affected
References
- https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.6.8 ↗
- https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-fghq-8h87-826g ↗
- https://github.com/PrestaShop/PrestaShop/commit/3fa0dfa5a8f4b149c7c90b948a12b4f5999a5ef8 ↗
- http://packetstormsecurity.com/files/162140/PrestaShop-1.7.6.7-SQL-Injection.html ↗