| Package | Affected versions | Patched versions |
|---|---|---|
| blog | < 1.7.8 | 1.7.8 |
A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract data from the database via the sb_category parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free