Ecommand email "Critical Security Issue"

[ikoshkin]

P.S. We’ve just announced it at the forum as well:

Critical Security Issue in CS-Cart Detected

Earlier this week, we sent an email about this issue. We received word of a major security issue in all versions of CS-Cart 4, including 4.16.2. This vulnerability could potentially let an attacker upload a PHP file to the server and execute it. We are not disclosing more details, because to our knowledge, the vulnerability hasn’t been exploited yet. You have 2 ways to close the vulnerability: If you’re using CS-Cart 4.16.2, upgrade to 4.16.2 SP1. It should be available in your Upgrade Cent…