A blind SQL injection vulnerability in the SmartBlog plugin for PrestaShop enables unauthenticated attackers to exfiltrate database contents, posing a significant risk to data confidentiality.

The application fails to properly sanitize user input in the id_post parameter of the details controller. This allows an unauthenticated attacker to inject malicious SQL queries and perform character-by-character data extraction from the underlying database.

The vulnerability carries a CVSS score of 8.2, reflecting its potential for high impact on data confidentiality. Successful exploitation allows unauthorized parties to systematically harvest sensitive information, such as administrator credentials or customer data, directly from the database. This exposure can lead to full system compromise, severe reputational damage, and regulatory non-compliance.

Immediate Action: Upgrade to the latest version of the SmartBlog plugin where this vulnerability is addressed. If an update is not available, remove the plugin from the production environment until a secure version can be verified.

Proactive Monitoring: Review database query logs for anomalous patterns, such as excessive requests containing SQL keywords or unusual string manipulation functions directed at the details controller.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns targeting the id_post parameter.

Public Exploit Available: Yes, a functional Python-based exploit script is available on ExploitDB (EDB-ID 48995).

Given the availability of a public proof-of-concept and the sensitivity of the data stored in the target database, this vulnerability represents a high-priority risk. Administrators must prioritize updating the SmartBlog plugin immediately. If patching is not feasible, the affected component should be disabled to prevent potential data exfiltration by unauthenticated actors.