CVE-2024-25842: Improper Privilege Management

An issue was discovered in Presta World "Account Manager - Sales Representative & Dealers - CRM" prestasalesmanager module for PrestaShop before version 9.0, allows remote attackers to escalate privilege and obtain sensitive information via the uploadLogo and postProcess methods...

PT-2024-21154 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 9.0 Description: An issue was discovered in the Presta World "Account Manager - Sales Representative & Dealers - CRM" prestasalesmanager module, allowing remote attackers to escalate privilege and obtain sensitive...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image zoom, among other features. A security vulnerability exists in PrestaShop prestasalesmanager 8.0.0 and earlier...

CVE-2024-25840: Path Traversal: 'dir\..\..\filename'

In the module "Account Manager | Sales Representative & Dealers | CRM" prestasalesmanager up to 9.0 from Presta World for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack...