Description
PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the module/ directory.
Remediation
References
Related Vulnerabilities
WordPress Plugin Cherry Cross-Site Scripting (1.2.8.1)
WordPress Plugin Email posts to subscribers Multiple Vulnerabilities (2.0)
Oracle JRE CVE-2013-1500 Vulnerability (CVE-2013-1500)
MySQL CVE-2017-3312 Vulnerability (CVE-2017-3312)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-25982)