Description

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 on Windows allows remote attackers to write to arbitrary image files.

Remediation

References

CVE-2018-19124

Related Vulnerabilities

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-1789)

WordPress Plugin Joy Of Text Lite-SMS messaging for WordPress SQL Injection (2.3.0)

WordPress Plugin SP Project & Document Manager SQL Injection (2.5.3)

Grafana Authentication Bypass by Spoofing Vulnerability (CVE-2022-35957)

Apache read beyond bounds via ap_rwrite() Vulnerability (CVE-2022-28614)

Severity

High

Classification

CVE-2018-19124 CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities