https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 04:29:21 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-11230 cnvd-2018-11230 https://cve.radiocsirt.org/vuln/cnvd-2018-11230 https://cve.radiocsirt.org/vuln/euvd-2026-65324 EUVD-2026-65324 https://cve.radiocsirt.org/vuln/euvd-2026-65324 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11495 <p>OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For example, an attacker can download ../../config.php.</p> <p>OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For example, an attacker can download ../../config.php.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-11495 https://cve.radiocsirt.org/vuln/ghsa-qgrf-34hp-ghm9 <p><strong>Affected:</strong> Packagist: opencart/opencart</p> <p>OpenCart through 3.0.2.0 allows directory traversal in the `editDownload` function in `admin\model\catalog\download.php` via `admin/index.php?route=catalog/download/edit`, related to the `download_id`. For example, an attacker can download `../../config.php`.</p> <p><strong>Affected:</strong> Packagist: opencart/opencart</p> <p>OpenCart through 3.0.2.0 allows directory traversal in the `editDownload` function in `admin\model\catalog\download.php` via `admin/index.php?route=catalog/download/edit`, related to the `download_id`. For example, an attacker can download `../../config.php`.</p> https://cve.radiocsirt.org/vuln/ghsa-qgrf-34hp-ghm9 https://cve.radiocsirt.org/vuln/gsd-2018-11495 gsd-2018-11495 https://cve.radiocsirt.org/vuln/gsd-2018-11495