CVE-2023-47444

An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data…

published November 15, 2023

CVSS
—
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on the underlying server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01779 · 78.1th percentile
Published
2023-11-15T00:00Z
EPSS history
Timeline
  • 15 NOV 00:00Z
    An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data…
    cvelistv5