PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2013-6358 - Vulnerability Database

PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2013-6358

High

Reference: CVE-2013-6358

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-6358

Title: PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability

Overview:

PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the module/ directory.