18 Nov 2018
CVE-2018-19355 - CVE Vulnerability
modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allows remote attackers to execute arbitrary code by uploading a php file via modules/orderfiles/upload.php with auptype equal to product (for upload destinations under modules/productfiles), order (for upload destinations under modules/files), or cart (for upload destinations under modules/cartfiles). (CVSS:0.0) (Last Update:2018-11-18)
Vulnerability Details : modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allows remote attackers to execute arbitrary code by uploading a php file via modules/orderfiles/upload.php with auptype equal to product (for upload destinations under modules/productfiles), order (for upload destinations under modules/files), or cart (for upload destinations under modules/cartfiles). Publish Date : 2018-11-18 Last Update Date : 2018-11-18 - CVSS Scores & Vulnerability Types
- Products Affected By CVE-2018-19355
- References For CVE-2018-19355
| ||||||||||||||||||||||||||||||||||||||||||||||
- Metasploit Modules Related To CVE-2018-19355There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information) |