In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via `PrestaPDFProductListModuleFrontController::queryDb().'
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')