Code injection

2018-03-2802:29:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.241 Low

EPSS

Percentile

96.6%

JSON

modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter.

CPENameOperatorVersion
prestashopge1.5.5.0
prestashople1.7.2.5
responsive_mega_menu_proeq1.0.32

Name	Operator	Version
prestashop	ge	1.5.5.0
prestashop	le	1.7.2.5
responsive_mega_menu_pro	eq	1.0.32

References

ia-informatica.com/it/CVE-2018-8823