Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-51586-PrestaShop-PoC — PrestaShop AdminLogin Email Enumeration PoC - CVE-2025-51586. This repository provides an ethical Proof-of-Concept (PoC) for the PrestaShop vulnerability allowing user enumeration through the AdminLogin password reset mechanism. It explains the impact, setup, and usage of the PoC script. | Kitploit
Tools/GitHubGitHub/7h30th3r0n3/cve-2025-51586-prestashop-poc
ReconnaissanceVulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHub7h30th3r0n3/cve-2025-51586-prestashop-poc

CVE-2025-51586-PrestaShop-PoC

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

About

View Repository
1210 months agoNot yet reviewed

PrestaShop AdminLogin Email Enumeration PoC - CVE-2025-51586. This repository provides an ethical Proof-of-Concept (PoC) for the PrestaShop vulnerability allowing user enumeration through the AdminLogin password reset mechanism. It explains the impact, setup, and usage of the PoC script.

Share

CVE-2025-51586 - PrestaShop AdminLogin Email Enumeration PoC

PrestaShop Logo

📌 Overview

This repository contains an ethical Proof-of-Concept (PoC) for the vulnerability CVE-2025-51586, affecting PrestaShop versions 1.7.x — 8.2.2.

The PoC enumerates administrator email addresses via the Back Office password reset mechanism (AdminLogin controller).

📝 Vulnerability Summary

User enumeration vulnerability in the AdminLogin controller in PrestaShop 1.7 through 8.2.2 allows remote attackers to obtain administrators user email addresses via manipulation of the id_employee and reset_token parameters. An attacker who has access to the Back Office login URL can trigger the password reset form to disclose the associated email address in a hidden field, even when the provided reset token is invalid. This issue has been fixed in 8.2.3.

  • CVE ID: CVE-2025-51586
  • Affected Software: PrestaShop
  • Versions: 1.7.x – 8.2.2
  • Fixed in: 8.2.3
  • Impact: Email enumeration (information disclosure)
  • Attack vector: Unauthenticated GET/POST to the reset endpoint

How it works

  1. Send a request to the reset page, e.g. https://domain.tld/admin/index.php?controller=AdminLogin&reset=1
  2. Provide a valid id_employee and an invalid reset_token
  3. If the ID exists, the response contains a hidden field: <input name="reset_email" value="[email protected]">
  4. Iterate IDs to enumerate admin emails

📚 References & Credit

Official advisory: Friends of Presta Security

Reported by Friends of Presta Security Team (advisory published September 4, 2025).

⚠️ Legal Notice

This PoC is for educational and authorized testing only. Use only on systems you own or where you have explicit permission. The author and contributors are not responsible for misuse.

📦 Installation

Clone and install dependencies:

root@kitploit:~
git clone https://github.com/7h30th3r0n3/CVE-2025-51586-PrestaShop-PoC.git
cd CVE-2025-51586-PrestaShop-PoC
pip install requests beautifulsoup4 rich

🖥️ Usage (CLI)

root@kitploit:~
python3 cve_2025_51586_enum.py \
  -u "https://target/admin/index.php?controller=AdminLogin&reset=1" \
  -s 1 -e 100 -m POST -t invalidtoken123 --delay 0.5 --timeout 10 --export results.csv

✍️ Author

PoC developed by 7h30th3r0n3. Vulnerability discovered by Friends of Presta Security Team.

Download Tool