SmartDataSoft Posted July 30, 2016 Posted July 30, 2016 Hello, @ all prestashop user who are using smartblog and those theme using smartblog need to disable smartblog as soon as possible. We have found possible sql injection in smartblog. We will provide a patch as soon as possible. Please disable your module , for same Share this post Link to post Share on other sites More sharing options...
doekia Posted July 30, 2016 Posted July 30, 2016 thanks for the alert. Did you reported the issue at security@prestashop.com ? Is the issue targeting a specific version or wider? Share this post Link to post Share on other sites More sharing options...
SmartDataSoft Posted July 30, 2016 Posted July 30, 2016 @all we have release fix of the security issue https://www.prestashop.com/forums/topic/545136-prestashop-blog-module/ Share this post Link to post Share on other sites More sharing options...
doekia Posted July 31, 2016 Posted July 31, 2016 An emergency fix to address the treat on 2.0.1: http://pastebin.com/g9D9fP73 Share this post Link to post Share on other sites More sharing options...
Recommended Posts