CVE-2024-34716 PoC — PrestaShop 跨站脚本漏洞

Source

https://github.com/aelmokhtar/CVE-2024-34716

Associated Vulnerability

Title:PrestaShop 跨站脚本漏洞 (CVE-2024-34716)
Description:PrestaShop是美国PrestaShop公司的一套开源的电子商务解决方案。该方案提供多种支付方式、短消息提醒和商品图片缩放等功能。 PrestaShop 8.1.6之前版本存在跨站脚本漏洞，该漏洞源于容易受到跨站脚本攻击。

Readme

# CVE-2024-34716_PoC


More technical details can be found on https://ayoubmokhtar.com/post/png_driven_chain_xss_to_remote_code_execution_prestashop_8.1.5_cve-2024-34716/

File Snapshot


 [4.0K]  /data/pocs/f77a10687b309f36d5ce67d715e5933b657d72eb
├── [4.2K]  exploit.html
├── [2.0K]  exploit.py
├── [7.1M]  ps_next_8_theme_malicious.zip
├── [ 170]  README.md
└── [5.4K]  reverse_shell.php

0 directories, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!