osCommerce Japanese Directory Traversal Vulnerability

osCommerce Japanese is a GNUGPL license based on the Japanese version of the open source online shopping e-commerce solution . A directory traversal vulnerability exists in osCommerce Japanese 2.2ms1j-R8 and earlier versions. A remote attacker can exploit this vulnerability to read arbitrary file...

CVE-2015-2965

CVE-2015-2965 affects osCommerce Japanese version 2.2ms1j-R8 and earlier, with a directory traversal vulnerability that allows remote authenticated administrators to read arbitrary files via unspecified vectors. Root cause is not fully detailed in the provided documents, but user impact is clear:...

PT-2015-6013

Name of the Vulnerable Software and Affected Versions osCommerce Japanese versions 2.2ms1j-R8 and earlier Description The issue allows remote authenticated administrators to read arbitrary files. Recommendations For osCommerce Japanese versions 2.2ms1j-R8 and earlier, at the moment, there is no...

CVE-2015-2965: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in osCommerce Japanese 2.2ms1j-R8 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors...