Unrated severityOSV Advisory· Published Nov 9, 2018· Updated Aug 5, 2024
CVE-2018-19126
CVE-2018-19126
Description
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21.6.0.1, 1.6.0.3, 1.6.1.0, …+ 1 more
- (no CPE)range: 1.6.0.1, 1.6.0.3, 1.6.1.0, …
- (no CPE)range: >=1.6.0 <1.6.1.23 or >=1.7.0 <1.7.4.4
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/45964/mitreexploitx_refsource_EXPLOIT-DB
- build.prestashop.com/news/prestashop-1-7-4-4-1-6-1-23-maintenance-releases/mitrex_refsource_MISC
- github.com/PrestaShop/PrestaShop/pull/11285mitrex_refsource_MISC
- github.com/PrestaShop/PrestaShop/pull/11286mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.