Skip to content
Threat Feed
Subscribe

Product

Cart Engine (<= 3.0.0)

1 brief RSS
high advisory

C97net qEngine CMS, Kemana Directory, and Cart Engine: Unrestricted File Upload Remote Code Execution (CVE-2014-125138)

C97net qEngine CMS, Kemana Directory, and Cart Engine are vulnerable to an unrestricted file upload flaw allowing authenticated Editor-role users to achieve remote code execution.

qEngine CMS +2
1r 2t 1c