Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on the underlying server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenCart 安全漏洞
Vulnerability Description
OpenCart是中国香港OpenCart团队的一套开源的电子商务系统。该系统提供产品评论、产品评分、产品添加等模块。 OpenCart 4.0.0.0 到 4.0.2.3版本存在安全漏洞，该漏洞源于允许具有common/security写入权限的后端用户在 config.php 和 admin/config.php 中写入任意不受信任的数据，从而导致在底层服务器上远程执行代码。
CVSS Information
N/A
Vulnerability Type
N/A