|
Description
|
|
Dang Hai Son has discovered a vulnerability in OpenCart, which can be exploited by malicious people to manipulate certain data.
Input passed to "country_id" in index.php (when "route" is set to "account/register/zone") is not properly sanitised in system/library/cache.php before being used to create cache files. This can be exploited to overwrite arbitrary files via directory traversal attacks and URL-encoded NULL bytes.
The vulnerability is confirmed in version 1.5.1.1. Prior versions may also be affected.
|
|
|
|
|
|
Vulnerable Products
|
|
Vulnerable Software:
OpenCart 1.x
|
|
|
|
|
|
Solution
|
|
Update to version 1.5.1.2.
|
|
|
|
|
|
CVE
|
|
|
|
|
|
|
|
References
|
|
Dang Hai Son:
http://vickigroup.wordpress.com/2011/09/06/opencart-arbitrary-file-creation-all-versions/
OpenCart Forum:
http://forum.opencart.com/viewtopic.php?f=2&
t=40275
|
|
|
|
|
|
Vulnerability Manager Detection
|
|
No
|
|
|
|
|
|
IPS Protection
|
|
|
|
|
|
|
