Path Traversal in OpenCart Extension Installer

Executive Summary

This vulnerability in OpenCart v4.2.0.0 allows attackers to upload malicious extensions that bypass directory restrictions during installation. The extension installer extracts zip files without verifying extracted paths stay within the intended directory, enabling file path traversal attacks.

Useful 0 Not Useful 0

Detection Guidance

Check for unexpected files in the webroot directory, especially PHP files. Look for recently modified files outside expected extension directories. Review OpenCart extension installations for suspicious paths containing ../ sequences.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to write arbitrary files, such as a PHP web shell, into the webroot directory. This could lead to complete server compromise, unauthorized data access, or further attacks on the system.

Useful 0 Not Useful 0

Mitigation Strategies

Stop using OpenCart v4.2.0.0 until patched. Remove any untrusted extensions. Restrict file write permissions in the webroot. Monitor for unauthorized file creation. Consider upgrading to a newer OpenCart version if available.

Useful 0 Not Useful 0