PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory

PrestaShop versions after 1.5.0.0 and before 1.7.6.6 are vulnerable to information exposure through directory listing in the upload directory due to a missing index.php file. id: CVE-2020-15081 info: name: PrestaShop 1.7.6.6 - Information Exposure via Upload Directory author: 0xAkoko severity: lo...

PrestaShop 1.5.0.0 < 1.7.6.6 Multiple Vulnerabilities

PrestaShop is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-15081

Summary (CVE-2020-15081) : PrestaShop versions after 1.5.0.0 and before 1.7.6.6 are vulnerable to information exposure via the upload directory due to a missing index.php that can enable directory listing. The issue is fixed in version 1.7.6.6. A workaround is to add an empty index.php file in th...