Page 2 of 7 results (0.003 seconds)

CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-11495

https://notcve.org/view.php?id=CVE-2018-11495

OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For example, an attacker can download ../../config.php. OpenCart hasta la versión 3.0.2.0 permite el salto de directorio en la función editDownload en admin\model\catalog\download.php mediante admin/index.php? • http://www.bigdiao.cc/2018/05/24/Opencart-v3-0-2-0 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1

CVE-2016-10509

https://notcve.org/view.php?id=CVE-2016-10509

SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier (aka courier_id) parameter to openbay.php. Una vulnerabilidad de inyección SQL en la función updateAmazonOrderTracking en upload/admin/model/openbay/amazon.php en OpenCart en versiones anteriores a la 2.3.0.0 permite que los administradores autenticados remotos ejecuten comandos SQL arbitrarios mediante un parámetro carrier (también conocido como courier_id) en openbay.php. • https://github.com/opencart/opencart/commit/b95044da6ac608e7239f7949ff21d3b65be68f82 https://github.com/opencart/opencart/issues/4114 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •