Test ID:	1.3.6.1.4.1.25623.1.0.100816
Category:	Web application abuses
Title:	OpenCart <= 1.3.2 'fckeditor' Arbitrary File Upload Vulnerability
Summary:	OpenCart is prone to an arbitrary file upload vulnerability; because it fails to properly sanitize user-supplied input.
Description:	Summary: OpenCart is prone to an arbitrary file upload vulnerability because it fails to properly sanitize user-supplied input. Vulnerability Impact: An attacker may leverage this issue to upload arbitrary files to the affected host. This can result in arbitrary code execution within the context of the vulnerable application. Affected Software/OS: OpenCart versions up to 1.3.2 are known to be affected. Other versions may also be affected. Solution: Update to version 1.3.3 or later. Make sure the directory /admin/view/javascript/fckeditor/ is deleted during the update. CVSS Score: 4.6 CVSS Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.