CVE-2022-31101

This exploit demonstrates a time-based SQL injection vulnerability in the Prestashop blockwishlist module 2.1.0. It extracts database information, including customer details, by leveraging a vulnerable parameter in the wishlist endpoint.

This repository provides a scanner and remediation tool for CVE-2022-31101, a vulnerability in PrestaShop's MySQL Smarty cache storage. It detects and fixes code injection vulnerabilities and malware introduced via this exploit.

This is a functional SQL injection exploit for CVE-2022-31101, targeting the PrestaShop blockwishlist module 2.1.0. It uses time-based blind SQLi to extract database information, including customer details and password hashes.