CVE-2018-8823: modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows…

PriorityP181critical9.8CVSS 3.0

AVNACLPRNUINSUCHIHAH

EXPLOIT

EPSS

51.57%

98.8th percentile

modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
prestashop	prestashop	1.5.5.0 – 1.7.2.5	—
responsive_mega_menu_pro_project	responsive_mega_menu_pro	—	—

Detection & IOCsextracted from sources · hover to see the quote

path/modules/bamegamenu/ajax_phpcode.php↗

url{{BaseURL}}/modules/bamegamenu/ajax_phpcode.php?code=print(md5({{num}}))

→Send a GET request to /modules/bamegamenu/ajax_phpcode.php with a `code` parameter containing a PHP function call (e.g., print(md5(...))). A 200 response with the expected PHP output confirms unauthenticated RCE.
→Match the HTTP response body for the MD5 hash output of the injected value and HTTP status 200 to confirm successful code execution.
→The vulnerable parameter is `code` in the GET request; attackers can pass arbitrary PHP function calls through it for unauthenticated RCE or SQL injection.

·The vulnerability affects Responsive Mega Menu Pro module version 1.0.32 specifically; verify the installed module version before applying detections. ↗
·The exploit requires no authentication (PR:N, UI:N), meaning any unauthenticated remote attacker can trigger it directly via HTTP GET.

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.