$ cve CVE-2013-1891 JSON

CVE-2013-1891 EXPLOIT

6.5

MEDIUM · CVSS 3.1 · EPSS 6.6% (pctl 94)

Patch early

A public exploit exists.

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.

CVSS	6.5 (MEDIUM, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS	6.58% — more likely to be exploited than 94% of all CVEs
Weakness	CWE-22
On CISA KEV	no
Public exploit	yes
Published	2022-06-24
Last modified	2026-06-16

Vendor	Product
microsoft	windows
opencart	opencart

Source	Title	Date
exploit-db	OpenCart 1.5.5.1 - 'FileManager.php' Directory Traversal Arbitrary File Access	2013-03-22