CVE-2021-36748

A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract data from the database via the sb_category parameter.

• CWE-89

• https://alysum5.promokit.eu/promokit/documentation/blog/Product, Third Party Advisory
• https://blog.sorcery.ieProduct
• https://blog.sorcery.ie/posts/ph_simpleblog_sqli/Exploit, Third Party Advisory
• https://alysum5.promokit.eu/promokit/documentation/blog/Product, Third Party Advisory
• https://blog.sorcery.ieProduct
• https://blog.sorcery.ie/posts/ph_simpleblog_sqli/Exploit, Third Party Advisory

Published

Aug 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36741An improper input validation vulnerability in Trend Micro Ap…8.8
• CVE-2021-36742A improper input validation vulnerability in Trend Micro Ape…7.8
• CVE-2021-36744Trend Micro Security (Consumer) 2021 and 2020 are vulnerable…7.8
• CVE-2021-36745A vulnerability in Trend Micro ServerProtect for Storage 6.0…9.8
• CVE-2021-36746Blackboard Learn through 9.1 allows XSS by an authenticated …5.4
• CVE-2021-36747Blackboard Learn through 9.1 allows XSS by an authenticated …5.4
• CVE-2021-36749In the Druid ingestion system, the InputSource is used for r…6.5
• CVE-2021-3675Improper Input Validation vulnerability in synaTEE.signed.dl…7.1
• CVE-2021-36750ENC DataVault before 7.2 and VaultAPI v67 mishandle key deri…8.1
• CVE-2021-36751ENC DataVault 7.2.3 and before, and OEM versions, use an enc…4.2
• CVE-2021-36753sharkdp BAT before 0.18.2 executes less.exe from the current…7.8
• CVE-2021-36754PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anyb…7.5