EUVD-2019-9210

Malware in sbrugna...

EUVD-2019-9211

Malware in sbrugna...

EUVD-2021-22668

Malware in sbrugna...

CVE-2019-19594

reset/modules/fotoliaFoto/multiupload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary code by uploading a .php file...

CVE-2019-19595

reset/modules/advancedformmakeredit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php file...

CVE-2021-36035

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability. An attacker with admin privileges could make a crafted request to the Adobe Stock API to achieve remote code execution...

CVE-2021-36035

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability. An attacker with admin privileges could make a crafted request to the Adobe Stock API to achieve remote code execution...

Input validation

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability. An attacker with admin privileges could make a crafted request to the Adobe Stock API to achieve remote code execution...

CVE-2021-36035 Magento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability. An attacker with admin privileges could make a crafted request to the Adobe Stock API to achieve remote code execution...

CVE-2021-36035

CVE-2021-36035 affects Magento Commerce (2.4.2 and earlier; 2.4.2-p1 and earlier; 2.3.7 and earlier). The root cause is improper input validation in the Magento Stock Media flow, allowing an attacker with admin privileges to send a crafted request to the Adobe Stock API and achieve remote code ex...

CVE-2021-36035

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability. An attacker with admin privileges could make a crafted request to the Adobe Stock API to achieve remote code execution...

PrestaShop Adobe Stock API integration code issue vulnerability

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods , short message alerts and product image scaling , etc. Adobe Stock API integration is one of the plug-ins to support the search of video and image assets . A security...

PrestaShop Adobe Stock API integration file upload vulnerability

PrestaShop is an open source e-commerce solution. PrestaShop Adobe Stock API integration reset/modules/advancedformmakeredit/multiupload/upload.php A file upload vulnerability exists that allows remote attackers to submit a special request that can be exploited to upload . php file and execute it...

CVE-2019-19595

reset/modules/advancedformmakeredit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php file...

CVE-2019-19595

reset/modules/advancedformmakeredit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php file...

CVE-2019-19594

reset/modules/fotoliaFoto/multiupload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary code by uploading a .php file...

Design/Logic Flaw

reset/modules/fotoliaFoto/multiupload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary code by uploading a .php file...

Design/Logic Flaw

reset/modules/advancedformmakeredit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php file...

CVE-2019-19594

The CVE-2019-19594 entry applies to PrestaShop 1.6 and 1.7 with the RESET.PRO Adobe Stock API Integration, via the file reset/modules/fotoliaFoto/multi_upload.php. The vulnerability allows remote code execution by uploading a PHP file, indicating a file-upload handling flaw in the integration com...

CVE-2019-19595

The CVE-2019-19595 issue affects the PrestaShop integration: RESET.PRO Adobe Stock API integration 4.8, specifically the file reset/modules/advanced_form_maker_edit/multiupload/upload.php. The root cause is a file upload vulnerability in the multiupload component that allows remote attackers to u...