CERT24CVE-2014-125137 — C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0: local file inclusion via the run parameterLoading data…
CERT24Threat Observatory
Period

CVE-2014-125137 — C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0: local file inclusion via the run parameter

C97net qEngine CMS, Kemana Directory, and Cart Engine in the specified versions contain a local file inclusion vulnerability in the run parameter of admin/task.php. Authenticated administrators can use directory traversal sequences to include and disclose local files readable by the web server.

← Back to intelligence

CVE-2014-125137 — C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0: local file inclusion via the run parameter

C97net qEngine CMS, Kemana Directory, and Cart Engine in the specified versions contain a local file inclusion vulnerability in the run parameter of admin/task.php. Authenticated administrators can use directory traversal sequences to include and disclose local files readable by the web server.