CVE-2023-45375 — AI Deep Analysis Summary

🚨 **Essence**: A critical **SQL Injection (SQLi)** flaw in the **PireosPay** module for PrestaShop.…

🛡️ **Root Cause**: The vulnerability stems from improper input validation in the **PireosPay** module.…

📦 **Affected**: **PrestaShop** users running the **PireosPay** module. <br>📉 **Version**: Specifically versions **1.7.10 and earlier** (up to 1.7.9). <br>🏢 **Vendor**: Module by **01generator.com**.

💀 **Attacker Actions**: <br>1️⃣ **Data Theft**: Extract customer PII, credit card info, and admin credentials. <br>2️⃣ **Privilege Escalation**: Gain unauthorized access to backend systems.…

⚠️ **Threshold**: **LOW**. <br>👤 **Auth**: Exploitable by **Guests** (unauthenticated users). <br>⚙️ **Config**: No special configuration needed; if the vulnerable module is installed, the attack surface is open.

🔓 **Public Exp?**: **YES**. <br>📜 **PoC**: Proof-of-Concept available via **ProjectDiscovery Nuclei Templates**. <br>🌍 **Status**: Actively being scanned and exploited in the wild due to easy availability.

🔍 **Self-Check**: <br>1️⃣ Scan your PrestaShop instance for the **PireosPay** module. <br>2️⃣ Verify the module version is **< 1.7.10**.…

🩹 **Official Fix**: **YES**. <br>✅ **Patch**: Update the PireosPay module to version **1.7.10 or later**. <br>📢 **Source**: Patch released by the module developer (01generator.com) and reported via Friends of Presta.

🚧 **No Patch Workaround**: <br>1️⃣ **Disable**: Immediately disable or uninstall the PireosPay module if not in use.…

🔥 **Urgency**: **HIGH**. <br>⏱️ **Priority**: **Immediate Action Required**. <br>📉 **Risk**: Since it affects guests and has public PoCs, unpatched sites are at imminent risk of data breach. Update NOW.