CVE-2022-22897

A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.

• CWE-89

• http://packetstormsecurity.com/files/168148/PrestaShop-Ap-Pagebuilder-2.4.4-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://friends-of-presta.github.io/security-advisories/modules/2023/01/05/appagebuilder.htmlExploit, Patch, Vendor Advisory
• http://packetstormsecurity.com/files/168148/PrestaShop-Ap-Pagebuilder-2.4.4-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://friends-of-presta.github.io/security-advisories/modules/2023/01/05/appagebuilder.htmlExploit, Patch, Vendor Advisory

Published

Aug 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22890There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_P…5.5
• CVE-2022-22891Jerryscript 3.0.0 was discovered to contain a SEGV vulnerabi…5.5
• CVE-2022-22892There is an Assertion 'ecma_is_value_undefined (value) || ec…5.5
• CVE-2022-22893Jerryscript 3.0.0 was discovered to contain a stack overflow…7.8
• CVE-2022-22894Jerryscript 3.0.0 was discovered to contain a stack overflow…7.8
• CVE-2022-22895Jerryscript 3.0.0 was discovered to contain a heap-buffer-ov…7.8
• CVE-2022-22899Core FTP / SFTP Server v2 Build 725 was discovered to allow …5.5
• CVE-2022-2290Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2022-22901There is an Assertion in 'context_p->next_scanner_info_p->ty…5.5
• CVE-2022-22908SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows …5.5
• CVE-2022-22909HotelDruid v3.0.3 was discovered to contain a remote code ex…8.8
• CVE-2022-2291A vulnerability was found in SourceCodester Hotel Management…5.4