Description

Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the route parameter.

Remediation

References

CVE-2009-1621

Related Vulnerabilities

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43720)

WordPress Plugin Ajax Contact Form Cross-Site Scripting (1.0)

WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.9.63)

WordPress Plugin CYSTEME Finder, the admin files explorer Cross-Site Request Forgery (1.4)

WebLogic CVE-2017-3248 Vulnerability (CVE-2017-3248)

Severity

Medium

Classification

CVE-2009-1621 CWE-22

Tags

Missing Update Known Vulnerabilities