SQL Injection

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

1. Prestashop posstaticfooter <= 1.0.0 - SQL InjectionCVE-2023-30194Prestashop · CVSS 9.8 · 32% likely

   CWE-89

2. Prestashop Blockwishlist 2.1.0 SQL InjectionCVE-2022-31101PrestaShop · CVSS 8.1 · 23% likely

   CWE-89

3. PrestaShop 1.7.7.0 - SQL InjectionCVE-2021-3110Prestashop · 19% likely

   CWE-89

4. PrestaShop Product Comments <4.2.0 - SQL InjectionCVE-2020-26248PrestaShop · CVSS 6.8 · 12% likely

   CWE-89

5. PrestaShop - SQL Injection to Eval InjectionCVE-2022-31181PrestaShop · CVSS 9.8 · 7.7% likely

   CWE-89

6. PrestaShop 'possearchproducts' <= 1.7 - SQL InjectionCVE-2023-30192Prestashop · CVSS 9.8 · 2.7% likely

   CWE-89

7. Blind SQL Injection in PrestaShopCVE-2020-15160PrestaShop · 11% likely

   CWE-89

8. Blind SQLi using Search filters in PrestaShopCVE-2021-43789PrestaShop · CVSS 7.5 · 4.7% likely

   CWE-89

9. PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"CVE-2023-30839PrestaShop · CVSS 10 · 1.7% likely

   CWE-89

10. PrestaShopSQL manager vulnerability (potential RCE)CVE-2023-39526PrestaShop · CVSS 9.1 · 1.7% likely

    CWE-89

11. modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to…CVE-2018-8824Prestashop · 1.4% likely

    CWE-89

12. An SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.7.0 and 3.7.1, allows remote attackers to execute arbitrar…CVE-2023-30153Prestashop · CVSS 9.8 · 1.0% likely

    CWE-89

13. PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection.CVE-2023-25206Prestashop · 0.9% likely

    CWE-89

14. PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.CVE-2023-25207Prestashop · CVSS 9.8 · 0.9% likely

    CWE-89

15. In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0.CVE-2023-24763Prestashop · CVSS 8.8 · 0.9% likely

    CWE-89

16. The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header.CVE-2023-27569Prestashop · CVSS 9.8 · 0.9% likely

    CWE-89

17. PrestaShop arbitrary file read vulnerabilityCVE-2023-30545PrestaShop · CVSS 7.7 · 0.9% likely

    CWE-89

18. PrestaShop vulnerable to boolean SQL injection in search product in BOCVE-2023-39524PrestaShop · CVSS 6.7 · 0.7% likely

    CWE-89

19. The eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie.CVE-2023-27570Prestashop · CVSS 9.8 · 0.6% likely

    CWE-89

20. SQL injection vulnerability in pscartabandonmentpro v.2.0.11 and before allows a remote attacker to escalate privileges via the pscartabandonmentproFrontCAPUnsubscribeJobModuleFro…CVE-2024-28392Prestashop · CVSS 9.8 · 0.6% likely

    CWE-89

21. In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in affe…CVE-2024-25843Prestashop · CVSS 9.8 · 0.6% likely

    CWE-89

22. In the module "Custom links" (pk_customlinks) <= 2.3 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The script ajax.php have a sensitive SQL call that can be…CVE-2024-36684Prestashop · CVSS 9.8 · 0.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.