Key Information 0x01 Affected Versions Vendor: PrestaShop Affected Versions: PrestaShop 8.2.0, PHP 7.x module 0x02 Vulnerability Description Vulnerability Type: PHP Deserialization Vulnerability Vulnerable Location: function in Vulnerability Details: Attackers can trigger the deserialization vulnerability by creating a malicious Phar file and uploading it to the server. This may lead to arbitrary code execution, sensitive information disclosure, remote file inclusion, and other security risks. 0x03 Exploitation Critical Code: Example Code to Generate Malicious Phar File: