SQL Injection Vulnerability in Customer Photo Gallery Addon for PrestaShop
CVE-2021-40814

9.8CRITICAL

Key Information:

Vendor

Mypresta

Status
Customer Photo Gallery
Vendor
CVE Published:
8 September 2021

What is CVE-2021-40814?

The Customer Photo Gallery addon for PrestaShop, prior to version 2.9.4, is susceptible to SQL injection attacks. This vulnerability could allow unauthorized access to the database, enabling attackers to manipulate or extract sensitive information. It is crucial for users to update to the latest version to protect their web applications from potential exploitation.

References

https://www.getastra.com/blog/911/plugin-exploit/prestash...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.