| शीर्षक | OpenCart 4.1.0.3 Path Traversal |
|---|
| विवरण | A Zip Slip vulnerability exists in the OpenCart extension installer for .ocmod.zip packages. During installation, ZIP entry names are used to build filesystem paths without properly rejecting traversal sequences such as ../ or validating that the resolved path remains داخل the intended extraction directory. An authenticated administrator who installs a crafted extension package can cause files to be written outside DIR_EXTENSION, resulting in arbitrary file write and possible remote code execution depending on the writable target path and server configuration |
|---|
| स्रोत | ⚠️ https://drive.google.com/file/d/1YemSW2Tn0LKzY3mPosMzElQeHs8P3LMt/view?usp=sharing |
|---|
| उपयोगकर्ता | hai271120 (UID 96497) |
|---|
| सबमिशन | 16/03/2026 01:18 PM (7 महीनों पहले) |
|---|
| संयम | 01/04/2026 03:50 PM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 354665 [OpenCart 4.1.0.3 Extension Installer Page installer.php निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|