Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-51586. PoCs published by 7h30th3r0n3. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional Python script that exploits CVE-2025-51586, an information disclosure vulnerability in PrestaShop's AdminLogin password reset mechanism. The script enumerates administrator email addresses by providing invalid reset tokens and can optionally perform brute-force attacks on discovered emails.
Description
An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature.
Exploits (1)
This repository contains a functional Python script that exploits CVE-2025-51586, an information disclosure vulnerability in PrestaShop's AdminLogin password reset mechanism. The script enumerates administrator email addresses by providing invalid reset tokens and can optionally perform brute-force attacks on discovered emails.
Nuclei Templates (1)
http.component:"prestashop"
References (3)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N