Path Traversal

prestashop/prestashop is vulnerable to Path Traversal. The vulnerability exists in the getEmailHTML function at AdminTranslationsController.php due to improper access control in the displayAjaxEmailHTML function which allows an attacker to read any file on the server...

PrestaShop 路径遍历漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A path traversal vulnerability exists in PrestaShop versions prior to 8.1.1, which...

PT-2023-26999 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 8.1.1 Description: The issue concerns the displayAjaxEmailHTML method, which can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured. This coul...