Description
PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 contain a patch for this issue. There are no known workarounds.
Remediation
References
Related Vulnerabilities
Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2019-16891)
Oracle Database Server CVE-2007-5504 Vulnerability (CVE-2007-5504)
Drupal Core 8.8.x Cross-Site Request Forgery (8.8.0 - 8.8.7)
MySQL CVE-2020-14891 Vulnerability (CVE-2020-14891)
Oracle Application Server Other Vulnerability (CVE-2007-3861)