This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2018-3758 | BDVDB-2026-102021 Detail

HackerOneexpress-cart

Description#

Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine.

Impact#

No impact statement in the source data.

Weaknesses#

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.