Exploit for SQL Injection in Prestashop

CVE-2021-43789 CVE-2021-4379

githubexploit · 2026-01-08

Description

This document describes a structured query language injection exploit affecting Prestashop.

Entry point

Parameterorder[sortOrder] · query param

Pathprestashop_1.7.8.1/admin860ykaqhn/index.php/sell/orders/

SQL injection via order filters (orderBy/order[sortOrder]) enabling stacked/time-based injections

Affected software

Prestashop< 1.7.8.2

Villatheme Woocommerce Multi Currency< 2.1.18

All known vulnerabilities by product

Prestashop Woocommerce Multi Currency

CVSS Score

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

4.6%higher than 90.7% of all CVEs

Updated 2026-07-22

Exploit Details

Modified:2026-01-08 21:05

Last Seen:2026-01-08 21:15

Reporter:baktistr

Written in:Shell

Last commit:2026-01-08

Other exploits for the same CVE

CVE-2021-43789

2026-09-03 KitPloitKITPLOIT

Exploit for Path Traversal in Grafana

2026-01-08 baktistrGITHUB

Exploit for SQL Injection in Prestashop

2022-01-28 numanturleGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=2F36B0CA-D830-5220-99CF-44F0F9AA3F4F
CVE-2021-4379 Enumeration Tools

Exploit Code

Share

Share on social media: