CVE-2018-19124: unauthorized file access in PrestaShop — file handling on Windows servers
PrestaShop and CVE-2018-19124: a practical explanation of unauthorized file access in file handling on Windows servers…
// category
PrestaShop Security
Opinion, technical notes and research on web development, servers, performance and cyber security.
CVE-2018-19125: unauthorized file access in PrestaShop — shop image directories
PrestaShop and CVE-2018-19125: a practical explanation of unauthorized file access in shop image directories, real-world impact…
CVE-2018-19126: remote code execution in PrestaShop — file upload processing
PrestaShop and CVE-2018-19126: a practical explanation of remote code execution in file upload processing, real-world impact…
CVE-2018-13784: weak cryptographic protection in PrestaShop — session cookie encryption
PrestaShop and CVE-2018-13784: a practical explanation of weak cryptographic protection in session cookie encryption, real-world…
CVE-2018-7491: clickjacking in PrestaShop — administration interface
PrestaShop and CVE-2018-7491: a practical explanation of clickjacking in administration interface, real-world impact, affected…
CVE-2018-5681: cross-site scripting (XSS) in PrestaShop — CMS page editor
PrestaShop and CVE-2018-5681: a practical explanation of cross-site scripting (XSS) in CMS page editor, real-world impact…
CVE-2018-5682: account enumeration in PrestaShop — password reset
PrestaShop and CVE-2018-5682: a practical explanation of account enumeration in password reset, real-world impact, affected…