lblfixer_cve2020_5250

LabelGrup Networks, official PrestaShop Partner Module for PS 1.7.X to fix CVE-2020-5250 vulnerability WIP Check: https://vulners.com/cve/CVE-2020-5250 https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mhfc-6rhg-fxp3 Visit our website: https://www.labelgrup.com...

CVE-2025-61922-PoC

CVE-2025-61922 Exploit: PrestaShop Checkout Account Takeover A simple, educational proof-of-concept script demonstrating the zero-click account takeover vulnerability in the PrestaShop Checkout module CVE-2025-61922. ⚠️ Legal & Ethical Notice: Use Responsibly This tool is for educational purposes...

CVE-2024-34716

CVE-2024-34716PoC More technical details can be found on https://ayoubmokhtar.com/post/pngdrivenchainxsstoremotecodeexecutionprestashop8.1.5cve-2024-34716/ Installation pip install -r requirements.txt Usage Usage: python exploit.py --url --email --local-ip --admin-path...

CVE-2022-31101

CVE-2022-31101 Exploit for PrestaShop bockwishlist module 2.1.0 SQLi CVE-2022-31101 Usage python3 cve-2022-31101.py Give the url to the wishlist when prompted. Example of a url: http://example.com/module/blockwishlist/view?idwishlist=1 Give the cookies for your account when prompted. Now it will...

fixcve2023_39526_2023_39527

fix CVE 202339526 GHSA-gf46-prm4-56pc https://github.com/advisories/GHSA-gf46-prm4-56pc CVE 202339527 GHSA-xw2r-f8xv-c8xp https://github.com/advisories/GHSA-xw2r-f8xv-c8xp Prestashop fix vulnerability CVE-2023-39526 & CVE-2023-39527...

blmvuln

PrestaShopウェブサイトの重大なセキュリティ脆弱性を修正 :rocket: CVE-2022-31101 検出兼修正ツール！ 新たに発見された脆弱性により、リモート攻撃者があなたのショップを乗っ取る可能性があります 脆弱性の詳細はこちらでお読みください： https://build.prestashop.com/news/major-security-vulnerability-on-prestashop-websites/...

lblfixer_cve_2023_28447

LabelGrup Networks, official PrestaShop Partner Module for PrestaShop 1.7.X to fix CVE-2023-28447 vulnerability Smarty JavaScript XSS For further information, check the following links: CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-28447 GitHub:...

CMSsc4n

CMSsc4n Tool to identify if a domain has got a CMS and determine his version. At the moment, CMS's supported by CMSsc4n are WordPress,Moodle,Joomla,Drupal and Prestashop. Instalation You can download the latest version of CMSsc4n by cloning the GitHub repository: root@kitploit: git clone...

prestashop-exploits

prestashop-exploits Collection of exploits/POCs for PrestaShop cookie vulnerabilities CVE-2018-13784 Refer to https://ambionics.io/blog/prestashop-privilege-escalation for details...

CVE-2024-41651

Blind SSRF to RCE エクスプロイト - PrestaShop 8.1.7 このドキュメントでは、新しい PrestaShop 8.1.7 の Docker インストール環境における Blind SSRF から RCE へのエクスプロイトについて概説します。 前提条件 少なくとも1つの旧バージョンのモジュールがインストールされていることを確認してください。例: psfacetedsearch オリジナルのパッケージをダウンロードします: psfacetedsearch v3.16.1 をダウンロード 再現手順 1. 悪意のあるファイルを準備する:...

PrestaShop-CVE-2018-19126

PrestaShop バックオフィス リモートコード実行 CVE-2018-19126 これは CVE-2018-19126 の PoC であり、PrestaShop バックオフィスにおける複数の脆弱性を連鎖させ、phar を介したデシリアライゼーションを引き起こし、リモートコード実行を達成するものです。 前提条件: PrestaShop 1.6.x 1.6.1.23 より前、または 1.7.x 1.7.4.4 より前。 バックオフィスアカウント ロジスティシャン、翻訳者、セールスマンなど。 PrestaShop リリースノート:...

lblfixer_cve_2023_30839

LabelGrup Networks, official PrestaShop Partner Module for PrestaShop 1.7.8.9 to fix CVE-2023-30545, CVE-2023-30839 and CVE-2023-30839 vulnerabilities For further information, check the following links: CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-30545 CVE:...

lblfixer_cve_2022_31181

LabelGrup Networks, official PrestaShop Partner Module for PrestaShop 1.6.1.X and 1.7.X to fix CVE-2022-36408 / CVE-2022-31181 vulnerability Chain SQL Injection For further information, check the following links: CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-36408 CVE GitHub:...

PrestaShop `tshirtecommerce` Module - SQL Injection

The tshirtecommerce module for PrestaShop is vulnerable to unauthenticated SQL injection via the designer endpoint, allowing attackers to execute arbitrary SQL queries and extract sensitive information from the database. id: CVE-2023-27637 info: name: PrestaShop tshirtecommerce Module - SQL...

PrestaShop lgcookieslaw - SQL Injection

The EU Cookie Law GDPR Banner + Blocker PrestaShop module before 2.1.3 allows blind SQL injection via the lglaw or lgcookieslaw cookie used to store user consent choices. id: CVE-2022-44727 info: name: PrestaShop lgcookieslaw - SQL Injection author: mastercho severity: critical description: | The...

PrestaShop Step by Step products Pack - SQL Injection

In the module “Step by Step products Pack” ndksteppingpack up to 1.5.6 from NDK Design for PrestaShop, a guest can perform SQL injection in affected versions. id: CVE-2023-46347 info: name: PrestaShop Step by Step products Pack - SQL Injection author: MaStErChO severity: critical description: | I...

PrestaShop fieldpopupnewsletter Module - Cross Site Scripting

Fieldpopupnewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the callback parameter at ajax.php. id: CVE-2023-39676 info: name: PrestaShop fieldpopupnewsletter Module - Cross Site Scripting author: meme-lord severity: medium...

PrestaShop productsalert - SQL Injection

In the module 'Products Alert' productsalert up to version 1.7.4 from Smart Modules for PrestaShop, a guest can perform SQL injection in affected versions. id: CVE-2024-36683 info: name: PrestaShop productsalert - SQL Injection author: mastercho severity: critical description: | In the module...

PrestaShop Theme Volty CMS Blog - SQL Injection

In the module 'Theme Volty CMS Blog' tvcmsblog up to versions 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. id: CVE-2023-39650 info: name: PrestaShop Theme Volty CMS Blog - SQL Injection author: mastercho severity: critical description: | In the...

PrestaShop xipblog - SQL Injection

In the blog module xipblog, an anonymous user can perform SQL injection. Even though the module has been patched in version 2.0.1, the version number was not incremented at the time. id: CVE-2023-27847 info: name: PrestaShop xipblog - SQL Injection author: mastercho severity: critical description...