← Back to CVE List

CVE-2019-16123

Published: 2019-09-09T02:15Z
Last Modified: 2024-11-21T04:30Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt