Description
Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated users to execute arbitrary PHP code on the servers.
References
- 92992 vdb-entry
- http://tips.cs-cart.jp/fix-twigmo-vulnerability-20160914.html
- JVNDB-2016-000157 third-party-advisory
- JVN#55389065 third-party-advisory