mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 18:52:12 +00:00
21 lines
758 B
Markdown
21 lines
758 B
Markdown
|
### [CVE-2018-13784](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13784)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- https://www.exploit-db.com/exploits/45046/
|
||
|
|
- https://www.exploit-db.com/exploits/45047/
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/0xT11/CVE-POC
|
||
|
|
- https://github.com/ambionics/prestashop-exploits
|
||
|
|
- https://github.com/zapalm/prestashop-security-vulnerability-checker
|
||
|
|
|