CVE-2018-11495

OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via…

published May 26, 2018

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For example, an attacker can download ../../config.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01673 · 76.6th percentile
Published
2018-05-26T20:00Z
EPSS history
Timeline
  • 26 MAY 20:00Z
    OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via…
    cvelistv5