4 matches found
OpenCart Path Traversal
OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...
CVE-2018-11495
OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...
PT-2018-10612
Name of the Vulnerable Software and Affected Versions OpenCart versions 3.0.2.0 and earlier Description The issue allows directory traversal in the editDownload function within adminmodelcatalogdownload.php via the admin/index.php?route=catalog/download/edit endpoint, related to the download id...
CVE-2018-11495: Improper Limitation of a Pathname to a Restricted Directory
OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...