Opencart: >> Opencart >> 3.0.1.2 Security Vulnerabilities
OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For example, an attacker can download ../../config.php.
CVSS Score
4.9
EPSS Score
0.006
Published
2018-05-26
Page 2