CVE-2017-17108 - CVE House
Back to Database
Status published Critical CVE-2017-17108

Path traversal vulnerability in the administrative panel in KonaKart eCommerce...

Vulnerability Description

Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to download system files, as well as upload specially crafted JSP files and in turn gain access to the server.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-17108

Credits & Attribution

No credits recorded in the NVD database.

References

More from konakart

View All →
CVE-2019-11680
KonaKart 8.9.0.0 is vulnerable to Remote Code Execution by uploading...
Critical 9.8
CVE-2014-5516
Cross-site request forgery (CSRF) vulnerability in the Storefront Application in...
Medium 6.5

Affected Vendor

Affected Software

konakart
Vulnerable Versions:
0

Timeline

Official Publish: February 3rd, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.