Tomatocart: >> Tomatocart >> 1.2.0 Security Vulnerabilities
Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter in a "3" action.
CVSS Score
5.0
EPSS Score
0.143
Published
2012-11-17