CVE-2013-1891: Path Traversal
Published Jun 24, 2022
·Updated
In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.
Affected Software
2 affected components
OpenCart OpenCart>=1.4.7<=1.5.5.1
Microsoft Windows
Event History
Jun 24, 2022
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this OpenCart vulnerability?
The vulnerability ID for this OpenCart vulnerability is CVE-2013-1891.
2
What is the title of this OpenCart vulnerability?
The title of this OpenCart vulnerability is 'In OpenCart 1.4.7 to 1.5.5.1 implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.'
3
What is the severity of CVE-2013-1891?
The severity of CVE-2013-1891 is medium with a CVSS score of 6.5.
4
Which versions of OpenCart are affected by CVE-2013-1891?
OpenCart versions 1.4.7 to 1.5.5.1 are affected by CVE-2013-1891.
5
How can the anti-traversal code in filemanager.php be bypassed in OpenCart?
The anti-traversal code in filemanager.php can be bypassed in OpenCart 1.4.7 to 1.5.5.1.