8 matches found
PrestaShop 1.6.x / 1.7.x Remote Code Execution
?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date: December 1st, 2018 Author: farisv Vendor Homepage:...
PrestaShop 1.6.x/1.7.x - Remote Code Execution Exploit
Exploit for php platform in category web applications ?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date:...
PrestaShop 1.6.x1.7.x - Remote Code Execution
PrestaShop 1.6.x1.7.x - Remote Code Execution ?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date: December 1st...
PrestaShop 1.6.x/1.7.x - Remote Code Execution
?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date: December 1st, 2018 Author: farisv Vendor Homepage:...
CVE-2018-19126
creationtimestamp| type| source ---|---|--- 2018-12-06 19:03:41+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4839 2018-12-06 23:57:18+00:00| published-proof-of-concept| https://t.me/antichat/2925...
CVE-2018-19126
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload...
CVE-2018-19126
CVE-2018-19126 affects PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4. The vulnerability enables remote code execution via a file upload, with an attacker potentially performing a back-office operation or exploit chain to trigger deserialization (as described in the linked exploit narr...
