CVE-2013-6295 - PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module

CRITICAL

PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module

Published Feb 18, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.29%

PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

Link	Providers	Tags
http://davidsopaslabs.blogspot.com/2013/		x_refsource_MISCExploitThird Party Advisory
http://davidsopaslabs.blogspot.com/2013/10/how-salesman-could-hack-prestashop.html		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 18, 2020

Updated Aug 6, 2024

Reserved Oct 30, 2013

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a