Path Traversal

prestashop/prestashop is vulnerable to Path Traversal. The vulnerability exists in the getEmailHTML function at AdminTranslationsController.php due to improper access control in the displayAjaxEmailHTML function which allows an attacker to read any file on the server...

PrestaShop 路径遍历漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A path traversal vulnerability exists in PrestaShop versions prior to 8.1.1, which...

PT-2023-26999 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 8.1.1 Description: The issue concerns the displayAjaxEmailHTML method, which can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured. This coul...

CVE-2023-39528: Improper Limitation of a Pathname to a Restricted Directory

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, the displayAjaxEmailHTML method can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured. Version 8.1.1 contains a patch for this issue. There are ...