Vulnerabilities > Smartdatasoft > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-08-24 CVE-2021-37538 SQL Injection vulnerability in Smartdatasoft Smartblog
Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the id_category parameter to the controllers/front/category.php category controller.
network
low complexity
smartdatasoft CWE-89
critical
 9.8
9.8