CVE

CVE-2020-15081

5.3

CVSSmedium

Exploitable remotely over the internet · no authentication required.

Description

In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6. A possible workaround is to add an empty index.php file in the upload directory.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

prestashop

Updated Sep 28, 2026View on NVD →

S4E scanner

mediumMisconfiguration~10 seconds

CVE-2020-15081 Scanner

CVE-2020-15081 Scanner - Information Disclosure vulnerability in PrestaShop

Used 3k times · 3.3k assets checked · url

Scanner page →Run scanner

CVE history: prestashop

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →