Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2022/05/14 3:15 a.m.•43 views

OpenCart Path Traversal

OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...

4.9CVSS7.8AI score0.01673EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2018/05/26 8:00 p.m.•7 views

CVE-2018-11495

OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...

6.9CVSS0.01673EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2018/05/26 12:00 a.m.•7 views

PT-2018-10612

Name of the Vulnerable Software and Affected Versions OpenCart versions 3.0.2.0 and earlier Description The issue allows directory traversal in the editDownload function within adminmodelcatalogdownload.php via the admin/index.php?route=catalog/download/edit endpoint, related to the download id...

4.9CVSS0.01673EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/26 12:00 a.m.•11 views

CVE-2018-11495: Improper Limitation of a Pathname to a Restricted Directory

OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the downloadid. For example, an attacker can download ../../config.php...

4.9CVSS5.8AI score0.01673EPSS
SaveExploits1References2
Rows per page
Query Builder