Design/Logic Flaw

2019-12-0516:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.3%

JSON

reset/modules/advanced_form_maker_edit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php file.

CPENameOperatorVersion
stock_api_integrationeq4.8
prestashopeq1.6
prestashopeq1.7

Name	Operator	Version
stock_api_integration	eq	4.8
prestashop	eq	1.6
prestashop	eq	1.7

References

ia-informatica.com/it/CVE-2019-19595