CVE-2023-30545

PrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, it is possible for a user with access to the SQL Manager (Advanced Options -> Database) to arbitrarily read any file on the operating system when using SQL function `LOAD_FILE` in a `SELECT` request. This gives the user access to critical information. A patch is available in PrestaShop 8.0.4 and PS 1.7.8.9

• CWE-89

• https://github.com/PrestaShop/PrestaShop/commit/cddac4198a47c602878a787280d813f60c6c0630Patch
• https://github.com/PrestaShop/PrestaShop/commit/d900806e1841a31f26ff0a1843a6888fc1bb7f81Patch
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-8r4m-5p6p-52rpVendor Advisory
• https://github.com/PrestaShop/PrestaShop/commit/cddac4198a47c602878a787280d813f60c6c0630Patch
• https://github.com/PrestaShop/PrestaShop/commit/d900806e1841a31f26ff0a1843a6888fc1bb7f81Patch
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-8r4m-5p6p-52rpVendor Advisory

Published

Apr 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30539Nextcloud is a personal home server system. Depending on the…8.8
• CVE-2023-30540Nextcloud Talk is a chat, video & audio call extension for N…4.3
• CVE-2023-30541OpenZeppelin Contracts is a library for secure smart contrac…5.3
• CVE-2023-30542OpenZeppelin Contracts is a library for secure smart contrac…8.8
• CVE-2023-30543@web3-react is a framework for building Ethereum Apps . In a…5.7
• CVE-2023-30544Kiwi TCMS is an open source test management system. In versi…4.3
• CVE-2023-30546Contiki-NG is an operating system for Internet of Things dev…7.5
• CVE-2023-30547vm2 is a sandbox that can run untrusted code with whiteliste…10
• CVE-2023-30548gatsby-plugin-sharp is a plugin for the gatsby framework whi…4.3
• CVE-2023-30549Apptainer is an open source container platform for Linux. Th…7.8
• CVE-2023-3055The Page Builder by AZEXO plugin for WordPress is vulnerable…4.3
• CVE-2023-30550MeterSphere is an open source continuous testing platform, c…4.5