3.5
Low
CVE-2023-3239 A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62
Description
A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQrCode. The manipulation of the argument img leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-231510 is the identifier assigned to this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OTCMS | 6.62 | No fix stated |
| OTCMS | 6.61 | No fix stated |
| OTCMS | 6.60 | No fix stated |
| OTCMS | 6.59 | No fix stated |
| OTCMS | 6.58 | No fix stated |
| OTCMS | 6.57 | No fix stated |
| OTCMS | 6.56 | No fix stated |
| OTCMS | 6.55 | No fix stated |
| OTCMS | 6.54 | No fix stated |
Show the 54 other branches Hide the 54 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| OTCMS | 6.53 | No fix stated |
| OTCMS | 6.52 | No fix stated |
| OTCMS | 6.51 | No fix stated |
| OTCMS | 6.50 | No fix stated |
| OTCMS | 6.49 | No fix stated |
| OTCMS | 6.48 | No fix stated |
| OTCMS | 6.47 | No fix stated |
| OTCMS | 6.46 | No fix stated |
| OTCMS | 6.45 | No fix stated |
| OTCMS | 6.44 | No fix stated |
| OTCMS | 6.43 | No fix stated |
| OTCMS | 6.42 | No fix stated |
| OTCMS | 6.41 | No fix stated |
| OTCMS | 6.40 | No fix stated |
| OTCMS | 6.39 | No fix stated |
| OTCMS | 6.38 | No fix stated |
| OTCMS | 6.37 | No fix stated |
| OTCMS | 6.36 | No fix stated |
| OTCMS | 6.35 | No fix stated |
| OTCMS | 6.34 | No fix stated |
| OTCMS | 6.33 | No fix stated |
| OTCMS | 6.32 | No fix stated |
| OTCMS | 6.31 | No fix stated |
| OTCMS | 6.30 | No fix stated |
| OTCMS | 6.29 | No fix stated |
| OTCMS | 6.28 | No fix stated |
| OTCMS | 6.27 | No fix stated |
| OTCMS | 6.26 | No fix stated |
| OTCMS | 6.25 | No fix stated |
| OTCMS | 6.24 | No fix stated |
| OTCMS | 6.23 | No fix stated |
| OTCMS | 6.22 | No fix stated |
| OTCMS | 6.21 | No fix stated |
| OTCMS | 6.20 | No fix stated |
| OTCMS | 6.19 | No fix stated |
| OTCMS | 6.18 | No fix stated |
| OTCMS | 6.17 | No fix stated |
| OTCMS | 6.16 | No fix stated |
| OTCMS | 6.15 | No fix stated |
| OTCMS | 6.14 | No fix stated |
| OTCMS | 6.13 | No fix stated |
| OTCMS | 6.12 | No fix stated |
| OTCMS | 6.11 | No fix stated |
| OTCMS | 6.10 | No fix stated |
| OTCMS | 6.9 | No fix stated |
| OTCMS | 6.8 | No fix stated |
| OTCMS | 6.7 | No fix stated |
| OTCMS | 6.6 | No fix stated |
| OTCMS | 6.5 | No fix stated |
| OTCMS | 6.4 | No fix stated |
| OTCMS | 6.3 | No fix stated |
| OTCMS | 6.2 | No fix stated |
| OTCMS | 6.1 | No fix stated |
| OTCMS | 6.0 | No fix stated |
Other CVEs of OTCMS
The 9 CVEs of OTCMS →
CVE-2023-6772
A vulnerability, which was classified as critical, was found in OTCMS 7.01
4.7
Medium
CVE-2023-3241
A vulnerability was found in OTCMS up to 6.62 and classified as problematic
3.5
Low
CVE-2023-3240
A vulnerability has been found in OTCMS up to 6.62 and classified as problematic
3.5
Low
CVE-2023-3238
A vulnerability, which was classified as critical, has been found in OTCMS up to 6.62
6.3
Medium