OpenCart v. 1.5.1.3 Full Path Disclosure Multiple

2012-12-05T00:00:00
ID 1337DAY-ID-19895
Type zdt
Reporter Dan Fosco
Modified 2012-12-05T00:00:00

Description

There are multiple pages in opencart 1.5.1.3 that disclose the full path.

                                        
                                            url/catalog/controller/account/address.php
url/catalog/controller/account/account.php
url/catalog/controller/account/download.php
url/catalog/controller/account/edit.php
url/catalog/controller/error/not_found.php

everything in /catalog/controller/account/
everything in /catalog/controller/affiliate/
everything in /catalog/controller/common/

I'm not going to list them all because there are a lot, and you only need one :P

#  0day.today [2018-02-18]  #