CVE-2023-39526 PoC — PrestaShopSQL manager vulnerability (potential RCE)

Source

https://github.com/dnkhack/fixcve2023_39526_2023_39527

Associated Vulnerability

Title: PrestaShopSQL manager vulnerability (potential RCE) (CVE-2023-39526)
Description:PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

Description

Prestashop fix vulnerability CVE-2023-39526 & CVE-2023-39527

Readme

# fix 
# CVE 2023_39526 (GHSA-gf46-prm4-56pc)
https://github.com/advisories/GHSA-gf46-prm4-56pc
# CVE 2023_39527 (GHSA-xw2r-f8xv-c8xp)
https://github.com/advisories/GHSA-xw2r-f8xv-c8xp

Prestashop fix vulnerability CVE-2023-39526 &amp; CVE-2023-39527

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →