ESLog inGet started free
Critical 10.0 CVSS 2.0 Core Published on 2008-12-31

Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown impact and attack vectors, related to the…

CVECVE-2008-5791 GHSANo GHSA advisory
View at the source View JSON Last modified at the source: 2026-06-16

Description

Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown impact and attack vectors, related to the (1) bankwire module, (2) cheque module, and other components.

Original text by NVD (NIST), public domain.

CVSS metrics 2.0

Source: nvd@nist.gov · primary
Critical 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
ConfidentialityCOMPLETE
IntegrityCOMPLETE
AvailabilityCOMPLETE

References

Found a vulnerability?

Write to the PrestaShop core security team:

security-core@prestashop.com

Related advisories

Same component: PrestaShop core
All core advisories (94)
IDAdvisoryComponentSeverityAffected versionsPublishedFix
CVE-2026-84186 Vulnerability involving incorrect access control in the Tools::getRemoteAddr() function in PrestaShop, which allows… Core Medium 6.9 ≥ 8.0.0 < 8.2.8
≥ 9.0.0 < 9.1.5 2026-09-07 No
GHSA-jf3w-9rmr-5rcr Improper access control on the back-office notifications endpoint exposes customer data Core Medium 4.3 ≥ 9.0.0 < 9.1.5
≥ 8.0.0 < 8.2.8 2026-08-18 Yes
GHSA-whxq-pxj5-qq7v SQL injection through back-office list filters Core Medium 6.5 ≥ 9.0.0 < 9.1.5
≥ 8.0.0 < 8.2.8 2026-08-18 Yes
GHSA-2cr4-vw9p-pjvf Client IP address can be spoofed through the X-Forwarded-For header Core High 7.3 ≥ 9.0.0 < 9.1.5
≥ 8.0.0 < 8.2.8 2026-08-18 Yes

Is your shop on 1.0.x ≤ 1.0, 0.x = 0.8.1, 0.x = 0.8.2, 0.x = 0.8.3, 0.x = 0.8.4, 0.x = 0.8.5, 0.x = 0.8.5.1, 0.x = 0.9, 0.x = 0.9.2, 0.x = 0.9.5, 0.x = 0.9.6, 0.x = 0.9.7, 1.0.x = 1.0.0.1, 1.0.x = 1.0.0.2, 1.0.x = 1.0.0.3, 1.0.x = 1.0.0.4, 1.0.x = 1.0.0.5?

PrestaShield checks it from the outside, without FTP access, and alerts you of every new advisory that affects you.
Check if my shop is affected