CVE-2024-34716

This repository contains a functional exploit for CVE-2024-34716, targeting PrestaShop 8.1.5. The exploit leverages a PNG file upload vulnerability to achieve remote code execution via a reverse shell.

This repository contains a functional exploit for CVE-2024-34716, targeting PrestaShop 8.1.5. The exploit automates the process of embedding a reverse shell in a theme file and leverages an XSS vulnerability to achieve remote code execution.

The repository claims to exploit CVE-2024-34716 via CSRF and reverse shell but lacks actual exploit code, instead directing users to external resources and containing vague marketing language. The README is a sales pitch rather than technical analysis.

This repository provides a detailed technical writeup of exploiting CVE-2024-34716 (PrestaShop XSS) as part of a multi-stage attack chain on the Trickster HTB machine. It includes steps for privilege escalation via SSTI and local exploits but lacks actual exploit code.