CVE-2018-8823

CRITICAL NUCLEI

Responsive Mega Menu <1.7.2.5 - RCE

Title source: llm

Description

modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter.

Nuclei Templates (1)

PrestaShop Responsive Mega Menu Module - Remote Code Execution

CRITICALVERIFIEDby MaStErChO

Shodan: http.component:"prestashop"

References (1)

[Exploit, Third Party Advisory] https://ia-informatica.com/it/CVE-2018-8823

Scores

CVSS v3 9.8

EPSS 0.9006

EPSS Percentile 99.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-94

Status published

Products (2)

prestashop/prestashop 1.5.5.0 - 1.7.2.5

responsive_mega_menu_pro_project/responsive_mega_menu_pro 1.0.32

Published Mar 28, 2018

Tracked Since Feb 18, 2026