Arbitrary File Creation Vulnerability in OpenCart 4.0.0.0

CVE-2024-21519

Summary

The vulnerability in OpenCart arises from an arbitrary file creation issue associated with the database restoration functionality. An attacker, possessing admin privileges, can exploit this flaw by injecting PHP code into the database. This enables the creation of a backup file with a custom filename and extension within the /system/storage/backup directory. Although the design of the application typically keeps the storage path outside the web root to enhance security, this vulnerability could still pose significant risks if the application’s configuration is not adequately managed.

References