Archive
26 May 2018
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 8.0
OpenCart Path Traversal
The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret tem…