Description

PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the module/ directory.

Remediation

References

CVE-2013-6358

Related Vulnerabilities

Django Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-41164)

WordPress Plugin Direct Download for Woocommerce Arbitrary File Download (1.15)

WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions SQL Injection (2.9.11)

MediaWiki CVE-2023-45372 Vulnerability (CVE-2023-45372)

WordPress Plugin WP Migrate DB Security Bypass (0.6)

Severity

High

Classification

CVE-2013-6358 CWE-434 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities