PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module
PrestaShop
Exploit
CVE-2013-6295
NVD
Refer to CVE-2013-6295 NVD advisory