CVE-2016-4862

Publication date

2017-04-20 18:00:00

Family

jpcert

State

PUBLISHED

Description

Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated users to execute arbitrary PHP code on the servers.