high7.5
CVE-2019-16123
In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure.
Impact
In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kartatopia | Piluscart | through 1.4.1 |