Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2023-3239

OTCMS path traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQrCode. The manipulation of the argument img leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-231510 is the identifier assigned to this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a OTCMS

  • 6.0affected
  • 6.1affected
  • 6.2affected
  • 6.3affected
  • 6.4affected
  • 6.5affected
  • 6.6affected
  • 6.7affected
  • 6.8affected
  • 6.9affected
  • 6.10affected
  • 6.11affected
  • 6.12affected
  • 6.13affected
  • 6.14affected
  • 6.15affected
  • 6.16affected
  • 6.17affected
  • 6.18affected
  • 6.19affected
  • 6.20affected
  • 6.21affected
  • 6.22affected
  • 6.23affected
  • 6.24affected
  • 6.25affected
  • 6.26affected
  • 6.27affected
  • 6.28affected
  • 6.29affected
  • 6.30affected
  • 6.31affected
  • 6.32affected
  • 6.33affected
  • 6.34affected
  • 6.35affected
  • 6.36affected
  • 6.37affected
  • 6.38affected
  • 6.39affected
  • 6.40affected
  • 6.41affected
  • 6.42affected
  • 6.43affected
  • 6.44affected
  • 6.45affected
  • 6.46affected
  • 6.47affected
  • 6.48affected
  • 6.49affected
  • 6.50affected
  • 6.51affected
  • 6.52affected
  • 6.53affected
  • 6.54affected
  • 6.55affected
  • 6.56affected
  • 6.57affected
  • 6.58affected
  • 6.59affected
  • 6.60affected
  • 6.61affected
  • 6.62affected

References