CVE-2018-10942 Prestashop AttributeWizardPro Module - Arbitrary File Upload · CloudMap

严重CVE-2018-10942RCE

Prestashop AttributeWizardPro Module - Arbitrary File Upload

披露于 2018/05/10 · 更新于 2025/07/17

CVSS 评分9.8/ 10.0

EPSS 概率83.3%百分位 99.2%

漏洞描述

In the Attribute Wizard addon 1.6.9 for PrestaShop allows remote attackers to execute arbitrary code by uploading a php file.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 PrestaShop 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2022-44727 PrestaShop lgcookieslaw - SQL Injection PrestaShop	严重	—	—	PoCEXP	2026/06/25
CVE-2020-15081 PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory PrestaShop	低危	—	—	PoCEXP	2026/01/30
CVE-2025-51586 PrestaShop - Information Disclosure PrestaShop	高危	—	—	PoCEXP	2025/12/18
CVE-2022-31181 PrestaShop - SQL Injection to Eval Injection PrestaShop	高危	—	—	PoCEXP	2025/11/20
prestashop_apmarketplace_sqli PrestaShop Ap Marketplace SQL Injection PrestaShop	高危	—	—	PoCEXP	2024/06/25
CVE-2024-36683 PrestaShop productsalert - SQL Injection PrestaShop	严重	9.8	1.4%	PoCEXP	2024/06/20