PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection

披露于 2021/08/21 · 更新于 2026/01/15

CVSS 评分7.5/ 10.0

EPSS 概率15.4%百分位 96.7%

漏洞描述

PrestaHome Blog for PrestaShop prior to version 1.7.8 is vulnerable to a SQL injection (blind) via the sb_category parameter.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 PrestaShop 相关的其他公开漏洞。

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2022-44727 PrestaShop lgcookieslaw - SQL Injection PrestaShop	未授权访问	严重	—	2.6%	PoC	2026/06/25
CVE-2020-15081 PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory PrestaShop	信息泄露	低危	—	1.6%	PoC	2026/01/30
CVE-2025-51586 PrestaShop - Information Disclosure PrestaShop	信息泄露	高危	—	0.82%	PoC	2025/12/18
CVE-2022-31181RCE PrestaShop - SQL Injection to Eval Injection PrestaShop	SQL注入	高危	—	6.6%	PoC	2025/11/20
PrestaShop Ap Marketplace SQL Injection PrestaShop	SQL注入	高危	—	—	PoC	2024/06/25
CVE-2024-36683 PrestaShop productsalert - SQL Injection PrestaShop	SQL注入	严重	9.8	0.96%	PoC	2024/06/20