Description
MyPrestaModules Prestashop Module v6.2.9 和 UpdateProducts Prestashop Module v3.6.9 被发现通过send.php存在 PHPInfo 信息泄露漏洞。
PrestaShop MyPrestaModules send.php 信息泄露漏洞（CVE-2023-39677）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-39677
https://blog.sorcery.ie/posts/myprestamodules_phpinfo/
https://security.friendsofpresta.org/modules/2023/09/08/simpleimportproduct-updateproducts.html
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39677.yaml
https://s4e.io/tools/prestashop-myprestamodules-phpinfo-disclosure-cve-2023-39677
https://inthewild.io/vuln/CVE-2023-39677
https://pentest-tools.com/vulnerabilities-exploits/prestashop-myprestamodules-phpinfo-disclosure_3469
https://cve.imfht.com/detail/CVE-2023-39677