Unrated severityOSV Advisory· Published Nov 19, 2018· Updated Aug 5, 2024

CVE-2018-19355

Description

modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allows remote attackers to execute arbitrary code by uploading a php file via modules/orderfiles/upload.php with auptype equal to product (for upload destinations under modules/productfiles), order (for upload destinations under modules/files), or cart (for upload destinations under modules/cartfiles).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Prestashop/PrestashopOSV
Prestashop/Customer Files Upload addonllm-create

Patches

Vulnerability mechanics

References

ia-informatica.com/it/CVE-2018-19355mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000