Description

reset/modules/fotoliaFoto/multi_upload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary code by uploading a .php file.

Remediation

References

CVE-2019-19594

Related Vulnerabilities

WordPress Plugin WP Mail Logging Cross-Site Scripting (1.11.1)

WordPress Plugin WP-Board SQL Injection (1.1)

Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2017-2670)

Oracle Database Server CVE-2006-5345 Vulnerability (CVE-2006-5345)

Oracle JRE CVE-2012-5074 Vulnerability (CVE-2012-5074)

Severity

Critical

Classification

CVE-2019-19594 CWE-434 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities