Description
Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter in a "3" action.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74459 ↗
- http://www.securityfocus.com/bid/52766 ↗
- http://packetstormsecurity.org/files/111291/TomatoCart-1.2.0-Alpha-2-Local-File-Inclusion.html ↗
- http://www.mavitunasecurity.com/local-file-inclusion-vulnerability-in-tomatocart/ ↗
- http://osvdb.org/80689 ↗