2 matches found
CVE-2018-11495
OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...
6.9CVSS0.01673EPSS
SaveExploits1References4
CVE-2018-11495: Improper Limitation of a Pathname to a Restricted Directory
OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...
4.9CVSS5.8AI score0.01673EPSS
SaveExploits1References2
20