Vulners
Lucene search
OpenCart 3.0.3.6 - 'Profile Image' Stored Cross-Site Scripting (Authenticated)
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2020-29471 | 24 Apr 202422:22 | – | circl |
 | Opencart 跨站脚本漏洞 | 29 Dec 202000:00 | – | cnnvd |
 | OpenCart Cross-Site Scripting Vulnerability (CNVD-2020-75516) | 30 Dec 202000:00 | – | cnvd |
 | CVE-2020-29471 | 29 Dec 202016:21 | – | cve |
 | CVE-2020-29471 | 29 Dec 202016:21 | – | cvelist |
 | EUVD-2022-3069 | 3 Oct 202520:07 | – | euvd |
 | OpenCart Stored Cross-Site Scripting | 24 May 202217:37 | – | github |
 | CVE-2020-29471 | 29 Dec 202017:15 | – | nvd |
 | OpenCart <= 3.0.3.8 Multiple XSS Vulnerabilities | 13 Jan 202100:00 | – | openvas |
 | GHSA-7VRP-3PFF-C3J4 OpenCart Stored Cross-Site Scripting | 24 May 202217:37 | – | osv |
10
# Exploit Title: OpenCart 3.0.3.6 - 'Profile Image' Stored Cross Site Scripting (Authenticated)
# Date: 24-11-2020
# Exploit Author: Hemant Patidar (HemantSolo)
# Vendor Homepage: https://www.opencart.com/
# Software Link: https://www.opencart.com/index.php?route=cms/download
# Version: 3.0.3.6
# Tested on: Windows 10/Kali Linux
# CVE: CVE-2020-29471
Vulnerable Parameters: Profile Image.
Steps-To-Reproduce:
1. Go to the opencart admin page.
2. Now go to the profile page.
* Before the next step write this in notepad ""><svg onload=alert("XSS")>" and save it as an payload.png
3. Now edit the image and uplaod the image as payload.png.
4. The XSS will be triggered.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Nov 2020 00:00Current
5.5Medium risk
Vulners AI Score5.5
CVSS 23.5
CVSS 3.14.8
EPSS0.00475