GHSA-gf46-prm4-56pcCriticalCVSS 9.1

PrestaShop SQL manager vulnerability

Published
August 9, 2023
Last Modified
November 12, 2023

🔗 CVE IDs covered (1)

CVE-2023-39526 →

📋 Description

Impact

Remote code execution through SQL injection and arbitrary file write in back office

Patches

1.7.8.10 8.0.5 8.1.1

Found by

Truff (via yeswehack)

Workarounds

none

References

none

🎯 Affected products3

  • composer/prestashop/prestashop:= 8.1.0
  • composer/prestashop/prestashop:>= 8.0.0, < 8.0.5
  • composer/prestashop/prestashop:< 1.7.8.10

🔗 References (4)