ID:5972 - Exploit for Input validation error in PrestaShop - CVE-2018-19125

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Exploits ID:5972 - Exploit for Input validation error in PrestaShop - CVE-2018-19125

ID:5972 - Exploit for Input validation error in PrestaShop - CVE-2018-19125

Published: June 17, 2021


Vulnerability identifier: #VU36439
Vulnerability risk: Medium
CVE-ID: CVE-2018-19125
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
PrestaShop

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to manipulate data.

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.


Remediation

Install update from vendor's website.