What is CVE-2021-36748?

CVE-2021-36748 is a vulnerability in N/a. Published 2021-08-20.

Is CVE-2021-36748 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2021-36748

A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract data from the database via the sb_category parameter.

EPSS: 0.873 (99.5th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

20142995/nuclei-templates
ARPSyndicate/cve-scores
ARPSyndicate/cvemon
ARPSyndicate/kenzer-templates

References

blog.sorcery.ie (x_refsource_MISC)
alysum5.promokit.eu/promokit/documentation/blog/ (x_refsource_MISC)
blog.sorcery.ie/posts/ph_simpleblog_sqli/ (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-36748?: CVE-2021-36748 is a vulnerability in N/a. Published 2021-08-20.
Is CVE-2021-36748 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.