Description

reset/modules/fotoliaFoto/multi_upload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary code by uploading a .php file.

Remediation

References

CVE-2019-19594

Related Vulnerabilities

WordPress Plugin AllWebMenus WordPress Menu 'abspath' Parameter Remote File Include (1.1.3)

WordPress Plugin Xorbin Analog Flash Clock Cross-Site Scripting (1.0)

Oracle JRE CVE-2012-3143 Vulnerability (CVE-2012-3143)

WordPress Plugin LearnPress-WordPress LMS Security Bypass (4.1.4.1)

WordPress 3.9.2 Multiple Vulnerabilities (3.9 - 3.9.2)

Severity

Critical

Classification

CVE-2019-19594 CWE-434 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities