Misconfiguration

Sansec threat research on misconfiguration. Our forensics team monitors attacks on online stores around the clock and publishes findings to help merchants stay protected.

← Browse all tags

Over 200 PrestaShop stores expose installer, allowing full takeover

Apr 14th • Sansec found over 200 live PrestaShop stores with their install directory publicly accessible. An attacker can overwrite the database configuration, gain admin access, and execute arbitrary code on...

prestashop rce misconfiguration

Sansec analysis: 12% of online stores leak private backups

Feb 7th • Sansec discovered that one in nine online stores accidentally expose private backups. This mistake could have dire consequences. Online criminals are actively scanning for these backups, as they co...

misconfiguration ecommerce-security database