Sploitus

CVE-2018-19126

5 known exploits for CVE-2018-19126

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload.

Affected products
Prestashop
Prestashop
< 1.6.1.23, 1.7.4.4
Fix
Available
CVSS 3.0
9.8 CRITICAL
EPSS
22.5% (98th percentile)
Weakness
CWE-434
NVD status
Modified
Published
2018-11-09
CVE-2018-19126 at NVD
Authoritative description, scoring and affected products

5 known exploits for CVE-2018-19126

Proof-of-concept code and exploit modules indexed by Sploitus

PrestaShop-CVE-2018-19126
2026-09-09 KitPloitKITPLOIT
PrestaShop 1.6.x/1.7.x - Remote Code Execution Exploit
2018-12-12 Fariskhi VidyanZDTPHP
PrestaShop 1.6.x / 1.7.x Remote Code Execution
2018-12-12 farisvPACKETSTORMPHP
PrestaShop 1.6.x1.7.x - Remote Code Execution
2018-12-11 Fariskhi VidyanEXPLOITPACKPHP
PrestaShop 1.6.x/1.7.x - Remote Code Execution
2018-12-11 Fariskhi VidyanEXPLOITDBPHP