Description
PrestaShop 是一个功能丰富，基于 PHP5 开发的 Web2.0 网上购物系统。PrestaShop xipblogv.2.0.1及之前版本中发现的SQL注入漏洞，攻击者可以通过该漏洞获取服务器敏感信息，进而控制整个服务器。
PrestaShop xipblog存在SQL注入漏洞（CVE-2023-27847）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2023-27847
https://www.ddpoc.com/DVB-2024-8325.html
https://www.nsfocus.net/vulndb/77114
https://cve.imfht.com/poc_detail/488fc7976aa5ee4f66a37647491de93a603acd25
https://pentest-tools.com/vulnerabilities-exploits/prestashop-xipblog-sql-injection_23138
https://access.redhat.com/security/cve/cve-2023-27847
https://nvd.nist.gov/vuln/detail/CVE-2023-27847
https://github.com/runZeroInc/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27847.yaml
https://security.friendsofpresta.org/modules/2023/03/23/xipblog.html
https://www.cve.org/CVERecord?id=CVE-2023-27847
https://blog.sorcery.ie/posts/xipblog_sqli/
https://www.vicarius.io/vsociety/vulnerabilities/cve-2023-27847
https://api.prestashield.com/vulnerability/cve-2023-27847/