CVE-2026-124916: remote code execution in PrestaShop — debug_cookie_name and debug_cookie_value in Performance settings
PrestaShop and CVE-2026-124916: a practical explanation of remote code execution in debug_cookie_name and debug_cookie_value in…
// category
Remote code execution
Opinion, technical notes and research on web development, servers, performance and cyber security.
CVE-2025-25691: remote code execution in PrestaShop — theme imports and PHAR files
PrestaShop and CVE-2025-25691: a practical explanation of remote code execution in theme imports and PHAR files, real-world…
CVE-2025-25692: remote code execution in PrestaShop — _getHeaders method and PHAR
PrestaShop and CVE-2025-25692: a practical explanation of remote code execution in _getHeaders method and PHAR, real-world…
CVE-2024-41651: remote code execution in PrestaShop — module upgrades over the network
PrestaShop and CVE-2024-41651: a practical explanation of remote code execution in module upgrades over the network, real-world…
CVE-2023-39526: remote code execution in PrestaShop — back-office SQL Manager
PrestaShop and CVE-2023-39526: a practical explanation of remote code execution in back-office SQL Manager, real-world impact…
CVE-2022-31181: remote code execution in PrestaShop — SQL-injection-to-eval chain
PrestaShop and CVE-2022-31181: a practical explanation of remote code execution in SQL-injection-to-eval chain, real-world…
CVE-2022-21686: remote code execution in PrestaShop — legacy back-office Twig templates
PrestaShop and CVE-2022-21686: a practical explanation of remote code execution in legacy back-office Twig templates, real-world…
CVE-2018-20717: remote code execution in PrestaShop — back-office orders section
PrestaShop and CVE-2018-20717: a practical explanation of remote code execution in back-office orders section, real-world…
CVE-2018-19126: remote code execution in PrestaShop — file upload processing
PrestaShop and CVE-2018-19126: a practical explanation of remote code execution in file upload processing, real-world impact…