PrestaShop 1.6.x/1.7.x - Remote Code Execution Exploit

Exploit for php platform in category web applications ?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date:...

PrestaShop 1.6.x / 1.7.x Remote Code Execution

?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date: December 1st, 2018 Author: farisv Vendor Homepage:...

PrestaShop 1.6.x1.7.x - Remote Code Execution

PrestaShop 1.6.x1.7.x - Remote Code Execution ?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date: December 1st...

PrestaShop 1.6.x/1.7.x - Remote Code Execution

?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date: December 1st, 2018 Author: farisv Vendor Homepage:...

CVE-2018-19126

creationtimestamp| type| source ---|---|--- 2018-12-06 19:03:41+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4839 2018-12-06 23:57:18+00:00| published-proof-of-concept| https://t.me/antichat/2925...

CVE-2018-19126

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload...

CVE-2018-19126

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload...

CVE-2018-19126

CVE-2018-19126 affects PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4. The vulnerability enables remote code execution via a file upload, with an attacker potentially performing a back-office operation or exploit chain to trigger deserialization (as described in the linked exploit narr...