Lucene search
K

8 matches found

OpenVAS
OpenVAS
added 2023/06/26 12:0 a.m.14 views

OpenCart 2.2.0 < 3.0.3.6 SQLi Vulnerability

OpenCart is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:opencart:opencart"; if...

7.2CVSS7.4AI score0.00758EPSS
Exploits1References1
0day.today
0day.today
added 2021/06/09 12:0 a.m.30 views

OpenCart 3.0.3.6 - (subject) Stored Cross-Site Scripting Vulnerability

Exploit Title: OpenCart 3.0.3.6 - 'subject' Stored Cross-Site Scripting Exploit Author: Mert Daş Vendor Homepage: https://www.opencart.com/ Software Link: https://www.opencart.com/index.php?route=cms/download Version: 3.0.3.7 Tested on: Windows 10 Stored Cross-site scriptingXSS: Stored XSS, also...

7.4AI score
Exploits0
CNVD
CNVD
added 2020/12/30 12:0 a.m.3 views

OpenCart Cross-Site Scripting Vulnerability (CNVD-2020-75515)

OpenCart is a PHP-based open source online e-commerce solution. A cross-site scripting vulnerability exists in the email Subject field in OpenCart 3.0.3.6. An attacker can exploit this vulnerability to steal cookies...

4.8CVSS6.2AI score0.00475EPSS
Exploits2References1
CNVD
CNVD
added 2020/12/30 12:0 a.m.3 views

OpenCart Cross-Site Scripting Vulnerability (CNVD-2020-75516)

OpenCart is a PHP-based open source online e-commerce solution. A cross-site scripting vulnerability exists in Profile Image in OpenCart 3.0.3.6. An attacker can exploit this vulnerability to upload and execute malicious code...

4.8CVSS6.5AI score0.00475EPSS
Exploits2References1
CVE
CVE
added 2020/12/29 4:21 p.m.72 views

CVE-2020-29471

OpenCart 3.0.3.6 is affected by stored cross-site scripting in the Profile Image feature. An administrator can upload a profile image containing JavaScript; when users view the profile image, the script executes, triggering XSS. The CVE entry CVE-2020-29471 is documented across multiple aggregato...

4.8CVSS4.8AI score0.00475EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.2 views

Opencart 跨站脚本漏洞

OpenCart is a PHP-based open source online e-commerce solution. A cross-site scripting vulnerability exists in the email Subject field in OpenCart 3.0.3.6. An attacker can exploit this vulnerability to steal cookies...

4.8CVSS5.6AI score0.00475EPSS
Exploits2References2
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.2 views

Opencart 跨站脚本漏洞

OpenCart is a PHP-based open source online e-commerce solution. A cross-site scripting vulnerability exists in Profile Image in OpenCart 3.0.3.6. An attacker can exploit this vulnerability to upload and execute malicious code...

4.8CVSS5.7AI score0.00475EPSS
Exploits2References2
CNNVD
CNNVD
added 2020/12/11 12:0 a.m.4 views

Opencart Cross-Site Request Forgery Vulnerability

Opencart is an open source e-commerce system from China Opencart company . The system provides modules for product reviews, product ratings, and product additions. OpenCart Ltd. A cross-site request forgery vulnerability exists in Opencart CMS version 3.0.3.6, which can be exploited by an attacke...

3.5CVSS5.7AI score0.00096EPSS
Exploits1References3
Rows per page
Query Builder