CVE-2016-10509

2022-10-0316:16:39

mitre

www.cve.org

sql injection

opencart

updateamazonordertracking

amazon

remote authenticated administrators

arbitrary sql commands

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.2%

JSON

SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier (aka courier_id) parameter to openbay.php.