prestashop security vulnerability checker

Pemeriksa Kerentanan Keamanan Prestashop

Perpustakaan dan alat untuk memeriksa Prestashop untuk kerentanan yang diketahui.

Informasi untuk pengguna biasa

Halaman beranda alat dan halaman dukungan: prestashop.modulez.ru. Deskripsi lengkap, cara menggunakan dan rilis stabil untuk diunduh tersedia di sana.

Informasi untuk pengguna tingkat lanjut

Contoh Laporkan

 SECURITY CHECK:
[Not exists] : CVE-2018-19355 : Security vulnerability (7.5/10) with the module OrderFiles. Solution: update the module, remove or fix vulnerable files. There is no information about vulnerable OrderFiles module version and about the author of the module. If you have the information, contact with me: https://prestashop.modulez.ru/en/contact-us?id_product=70
[Not exists] : CVE-2018-19126 | CVE-2018-19125 | CVE-2018-19124 : Security vulnerability (7.5/10). The explanation: https://prestashop.modulez.ru/en/news/51
[Not exists] : CVE-2018-13784 : Security vulnerability (6.4/10). More info: http://build.prestashop.com/news/prestashop-1-7-3-4-1-6-1-20-maintenance-releases/
[Not exists] : CVE-2018-8824 | CVE-2018-8823 : Security vulnerability (7.5/10) with the "Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro" module v1.0.32. Solution: update the module, remove or fix vulnerable files. The module on Addons: https://addons.prestashop.com/en/menu/20464-responsive-mega-menu-horizontaldropdownswipesticky.html
[Exists] : CVE-2018-7491 : Security vulnerability (5/10). This is UI-Redressing/Clickjacking vulnerability. More info: https://github.com/PrestaShop/PrestaShop/pull/8807
[Exists] : CVE-2018-5682 : Security vulnerability (5/10). The attacker can review existent emails of employees and customers. More info: http://forge.prestashop.com/browse/BOOM-4613
[Exists] : CVE-2018-5681 : Security vulnerability (3.5/10). More info: http://forge.prestashop.com/browse/BOOM-4612
[Exists] : CVE-2017-9841 : Security vulnerability (7.5/10). Potentially malicious files found: "/vendor/symfony/symfony/src/Symfony/Component/ClassLoader/Tests/Fixtures/ClassesWithParents/F.php". Solution: remove or fix vulnerable files. More info: https://www.prestashop.com/en/security-announcement-your-store-vulnerable-malware
[Not exists] : CVE-2015-1175 : Security vulnerability (4.3/10) with the BlockLayered module v2.0.5 or less. Solution: update the module, remove or fix vulnerable files. The module on GitHub: https://github.com/PrestaShop/blocklayered
[Not exists] : CVE-2012-6641 : Security vulnerability (5/10) with the SoColissimo module in PrestaShop before 1.4.7.2. Solution: update the module, remove or fix vulnerable files. The module on GitHub: https://github.com/quadra-informatique/SoColissimo-3.x-Prestashop
[Not exists] : CVE-2012-5801 | CVE-2012-5800 | CVE-2012-5799 : Security vulnerability (5.8/10) with the PayPal, ebay, CanadaPost (Presto-Changeo) modules. There is no information about issue for a concrete version of PrestaShop and a version of PayPal, ebay, CanadaPost (Presto-Changeo) modules. More info: https://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
[Not exists] : CVE-2011-4545 : Security vulnerability (5/10). Solution: update your PHP to at least the last of 5.6. More info: https://www.dognaedis.com/vulns/DGS-SEC-7.html
[Not exists] : CVE-2011-4544 : Security vulnerability (4.3/10) with the "mondialrelay" module and "ajaxfilemanager" script. More info: https://www.dognaedis.com/vulns/DGS-SEC-5.html
[Not exists] : CVE-2011-3796 : Security vulnerability (5/10). Allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message.
[Not exists] : CVE-2008-5791 | CVE-2008-6503 : Security vulnerability (10/10). Solution: upgrade or remove your PrestaShop 1.1 ;)
[Not exists] : Outdated version of PrestaShop : Actual versions of PrestaShop are 1.6 and 1.7. Solution: upgrade. How to do this: https://prestashop.modulez.ru/en/services/28-prestashop-upgrade-to-newest-16-17-by-zapalm-4-hours.html
------
ATTENTION: Your website has 4 security issues!
The vulnerability with the score of 10 is the most dangerous and vice versa for the score of 1.

Cek satu kali untuk kerentanan

Salin folder prestashop-security-vulnerability-checker ke direktori root prestashop Anda (di mana ada index.php , init.php dan sebagainya). Jalankan skrip ini melalui browser web Anda atau dari konsol, misalnya:

1. Jalankan dari browser: http://localhost/prestashop-security-vulnerability-checker/index.php
2. Jalankan dari konsol: php index.php

Instalasi ke proyek Anda

Tambahkan ketergantungan langsung ke file composer.json Anda:

 "repositories": [
  {
    "type": "vcs",
    "url": "https://github.com/zapalm/prestashop-security-vulnerability-checker"
  }
],
"require": {
  "php": ">=5.2",
  "zapalm/prestashop-security-vulnerability-checker": "dev-master"
},

Lihat contoh penggunaan dalam skrip index.php .

Bagaimana membantu proyek tumbuh dan mendapatkan pembaruan

Berikan bintang ke proyek. Itu saja! :)

Berkontribusi pada kode

Persyaratan untuk kontributor kode

Kontributor harus mengikuti aturan berikut:

• Buat permintaan tarik Anda di cabang dev , bukan cabang utama .
• Jangan perbarui nomor versi.
• Ikuti standar pengkodean PSR.

Proses dalam detail untuk kontributor kode

Kontributor yang ingin mengedit file proyek harus mengikuti proses berikut:

1. Buat akun GitHub Anda, jika Anda belum memilikinya.
2. Fork Project ke akun GitHub Anda.
3. Kloning garpu Anda ke mesin lokal Anda.
4. Buat cabang di klon lokal Anda dari proyek untuk perubahan Anda.
5. Ubah file di cabang Anda. Pastikan untuk mengikuti standar pengkodean.
6. Dorong cabang Anda yang diubah ke garpu Anda di akun GitHub Anda.
7. Buat permintaan tarik untuk perubahan Anda di cabang dev proyek. Jika Anda memerlukan bantuan untuk membuat permintaan tarik, baca halaman Bantuan GitHub tentang membuat permintaan tarik.
8. Tunggu agar pengelola menerapkan perubahan Anda.

Jangan ragu untuk membuat permintaan tarik jika sulit bagi Anda untuk menerapkan standar pengkodean.