Summary
OpenCart is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to upload arbitrary files to the affected computer
this can result in arbitrary code execution within the context of the vulnerable application.
OpenCart 1.4.9.1 is vulnerable
other versions may also be affected.
References
Updated on 2015-03-25
