CVE-2019-19594

reset/modules/fotoliaFoto/multi_upload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary…

published December 5, 2019

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

😱 A simple file upload is the key to a potential code execution disaster in the RESET.PRO Adobe Stock API Integration for PrestaShop! 🚨 It's like allowing someone to drop off a package at your door without checking what's inside — you never know when they'll slip in something dangerous! 📦 An attacker could exploit this vulnerability to upload a malicious PHP file, enabling them to execute arbitrary code on your server. This means they could take full control, access sensitive data, or even shut down your entire site — absolutely devastating!

Put simply

It's like allowing someone to drop off a package at your door without checking what's inside — you never know when they'll slip in something dangerous! 📦 This vulnerability exists in reset/modules/fotoliaFoto/multi_upload.php, where the server does not properly validate uploaded files, allowing attackers to upload malicious PHP scripts.

What to do

An attacker could exploit this vulnerability to upload a malicious PHP file, enabling them to execute arbitrary code on your server. This means they could take full control, access sensitive data, or even shut down your entire site — absolutely devastating! To protect yourself, immediately restrict file upload types to only allow safe formats, and consider implementing stringent validation checks on uploaded files. Additionally, check for any available patches or updates to the PrestaShop module and apply them without delay. You've got this! With the right actions, you can secure your site and keep your digital space safe from harm! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03998 · 90.5th percentile
Published
2019-12-05T15:26Z
EPSS history
Timeline
  • 05 DEC 15:26Z
    reset/modules/fotoliaFoto/multi_upload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary…
    cvelistv5