Description
In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.
Exploits (1)
References (3)
Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
http://www.waraxe.us/advisory-98.html
Exploit, Mailing List, Third Party Advisory x_refsource_misc
https://seclists.org/fulldisclosure/2013/Mar/176
Mailing List, Third Party Advisory x_refsource_misc
https://www.openwall.com/lists/oss-security/2013/03/24/1
Scores
CVSS v3
6.5
EPSS
0.0402
EPSS Percentile
88.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Details
CWE
CWE-22
Status
published
Products (1)
opencart/opencart
1.4.7 - 1.5.5.1
Published
Jun 24, 2022
Tracked Since
Feb 18, 2026