MIRAGE
Threat IntelligenceCVEs › CVE-2020-26248

CVE-2020-26248 — exposed on the internet

Internet exposure observed by OffSeq scans · last 30 days

1
Exposed hosts
6.8
CVSS
12.4%
EPSS

Found on 1 internet-exposed hosts by OffSeq scans; no in-the-wild exploitation has been observed against OffSeq honeypots in this window.

About CVE-2020-26248

In the PrestaShop module "productcomments" before version 4.2.1, an attacker can use a Blind SQL injection to retrieve data or stop the MySQL service. The problem is fixed in 4.2.1 of the module.

CWE-89

OffSeq internet scanning found CVE-2020-26248 on 1 exposed hosts in the last 30 days. OffSeq honeypots have not recorded in-the-wild exploitation of this CVE in the current window — this page tracks its exposure footprint and status; if exploitation begins, the live honeypot signal will appear here.

Exposed-host countries

Exposed via

http

Open the live CVE-2020-26248 view →

References