SQL Injection in PrestaShop leocustomajax leoajax.php

Successful exploitation can allow an attacker to manipulate backend SQL queries. Depending on the application logic, database permissions, and deployment configuration, this may enable unauthorized access to or modification of application data, extraction of sensitive information from the database, authentication bypass in some scenarios, or other database-level impacts.

Restrict external access to the vulnerable endpoint where feasible, for example through WAF rules, reverse-proxy filtering, IP allowlisting for administrative functionality, or disabling the leocustomajax module if it is not required. Monitor for suspicious requests targeting modules/leocustomajax/leoajax.php and for anomalous database activity. Apply least-privilege database permissions to reduce blast radius.

Upgrade or replace the vulnerable leocustomajax module with a fixed version if one is available from the vendor or maintainer. Review the code handling requests in modules/leocustomajax/leoajax.php and remediate by using parameterized queries/prepared statements, strict server-side input validation, and proper escaping where applicable. If no vendor fix is available, remove or disable the vulnerable module until a patch can be applied.