CVE-2014-125138 | C97net qEngine CMS/Kemana Directory/Cart Engine Administrative Image Fields /public/image page_image/cat_image unrestricted upload

October 28, 2026 Yanac

A vulnerability, which was classified as critical, was found in C97net qEngine CMS, Kemana Directory and Cart Engine. This affects an unknown part of the file /public/image of the component Administrative Image Fields. Executing a manipulation of the argument page_image/cat_image can lead to unrestricted upload.

This vulnerability is registered as CVE-2014-125138. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More