CVE-2018-19126

This exploit chains multiple vulnerabilities in PrestaShop to achieve remote code execution via deserialization of a malicious PHAR file. It leverages file upload and directory manipulation to trigger the payload.

This repository contains a functional exploit for CVE-2018-19126, which chains multiple vulnerabilities in PrestaShop to achieve remote code execution via phar deserialization. The exploit automates the process of uploading a malicious phar file, renaming the upload directory, and triggering deserialization.