{"id":"CVE-2021-3110","details":"The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade id_products[] parameter.","modified":"2026-08-07T16:50:14.117604Z","published":"2021-01-20T13:15:13.033Z","references":[{"type":"WEB","url":"https://medium.com/%40gondaliyajaimin797/cve-2021-3110-75a24943ca5e"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/49410"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/prestashop/prestashop","events":[{"introduced":"aab3f53c9c31d79a6c60d9744d2a175c4d6c5194"},{"last_affected":"aab3f53c9c31d79a6c60d9744d2a175c4d6c5194"}],"database_specific":{"source":"CPE_STRING","cpe":"cpe:2.3:a:prestashop:prestashop:1.7.7.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.7.7.0"},{"last_affected":"1.7.7.0"}]}}],"versions":["1.7.7.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3110.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}