Lucene search
+L

2 matches found

Mend
Mend
•added 2018/05/26 8:00 p.m.•7 views

CVE-2018-11495

OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...

6.9CVSS0.01673EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/26 12:00 a.m.•11 views

CVE-2018-11495: Improper Limitation of a Pathname to a Restricted Directory

OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...

4.9CVSS5.8AI score0.01673EPSS
SaveExploits1References2
Rows per page
Query Builder