CVE-2018-12256

admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file resulting in remote code execution by using the text/xml or application/xml Content-Type in a publichtml/admin/?app=vqmods&doc=vqmods request...

CVE-2018-12256: Unrestricted Upload of File with Dangerous Type

admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file resulting in remote code execution by using the text/xml or application/xml Content-Type in a publichtml/admin/?app=vqmods&doc=vqmods request...

PT-2018-11080

Name of the Vulnerable Software and Affected Versions LiteCart versions prior to 2.1.3 Description The issue allows remote authenticated attackers to upload a malicious file, resulting in remote code execution. This is achieved by using the text/xml or application/xml Content-Type in a request to...