CVEブラウザに戻る

CVE-2020-15160

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1690%

EPSS Percentile35.14th

Published2020年9月24日

Last Modified2024年11月21日

Vulnerability Description

PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter. The problem is fixed in 1.7.6.8

Affected Platforms (CPE)

📦

Prestashop

Prestashop

>= 1.7.5.0 and < 1.7.6.8

References & Advisories

🔗 http://packetstormsecurity.com/files/162140/PrestaShop-1.7.6.7-SQL-Injection.html

🔗 https://github.com/PrestaShop/PrestaShop/commit/3fa0dfa5a8f4b149c7c90b948a12b4f5999a5ef8

🔗 https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.6.8

🔗 https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-fghq-8h87-826g

🔗 http://packetstormsecurity.com/files/162140/PrestaShop-1.7.6.7-SQL-Injection.html

🔗 https://github.com/PrestaShop/PrestaShop/commit/3fa0dfa5a8f4b149c7c90b948a12b4f5999a5ef8

🔗 https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.6.8

🔗 https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-fghq-8h87-826g

関連する脆弱性情報

CVE-2008-579110.0

Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown impact and att...

CVE-2019-155659.8

The ICOMMKT connector before 1.0.7 for PrestaShop allows SQL injection in icommktconnector.php.

CVE-2019-195959.8

reset/modules/advanced_form_maker_edit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allo...

CVE-2019-195949.8

reset/modules/fotoliaFoto/multi_upload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote a...