Opencart Divido - Sql Injection

OpenCart Divido plugin is susceptible to SQL injection id: CVE-2018-11231 info: name: Opencart Divido - Sql Injection author: ritikchaddha severity: high description: | OpenCart Divido plugin is susceptible to SQL injection impact: | This vulnerability can lead to data theft, unauthorized access,...

CVE-2024-21514

CVE-2024-21514 PoC and Bulk Scanner Overview POC for CVE-2024-21514 : SQL Injection issue was identified in the Divido payment extension for OpenCart, which is included by default in version 3.0.3.9 This POC is create by M Ali and it's based on this Security Advisory by Snyk. How to Use Minimum...

opencart-reward-free-checkout

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opencart-reward-free-checkout Write-up: https://abraxaslabs.tech/research/opencart-reward-free-checkout opencart-reward-free-checkout OpenCart 4.1.0.4 - OpenCart Ltd CVE-2025-15116 was a coupon race through 4.1.0.3. O...

NekoBotV1

NekoBotV1Rev | Auto Exploiter With 500+ Exploit 2000+ Shell For Old version NekobotV1 NekoBotV1Rev is an auto exploit tool to facilitate the penetration of one or many websites Wordpress, Joomla, Drupal, Magento, Opencart,and Etc. Features : + Wordpress : 1- Cherry-Plugin 2- download-manager Plug...

CVE-2026-119558

OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-price orders by clearing reward points after selecting Free Checkout. Attackers can apply points, save Free Checkout, then submit zero points via reward.save so the confirm handle...

EUVD-2026-113823

OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-price orders by clearing reward points after selecting Free Checkout. Attackers can apply points, save Free Checkout, then submit zero points via reward.save so the confirm handle...

CVE-2026-119558 OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points

OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-price orders by clearing reward points after selecting Free Checkout. Attackers can apply points, save Free Checkout, then submit zero points via reward.save so the confirm handle...

CVE-2026-119558

OpenCart versions through 4.1.0.4 are affected by a business logic vulnerability (CWE-841) that allows logged-in customers to bypass payment requirements. By manipulating reward points during the checkout process, an attacker can select Free Checkout , apply points, and then submit zero points vi...

CVE-2026-119558 OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points

OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-price orders by clearing reward points after selecting Free Checkout. Attackers can apply points, save Free Checkout, then submit zero points via reward.save so the confirm handle...

CVE-2026-119558: OpenCart: OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid…

OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-price orders by clearing reward points after selecting Free Checkout. Attackers can apply points, save Free Checkout, then submit zero points via reward.save so the confirm handle...

PT-2026-133496

OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-price orders by clearing reward points after selecting Free Checkout. Attackers can apply points, save Free Checkout, then submit zero points via reward.save so the confirm handle...

CVE-2026-85531

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

CVE-2026-85531

The OpenCart Virtual POS Module by Sipay Electronic Money and Payment Services Inc. is vulnerable to a payment validation bypass due to improper verification of cryptographic signatures. This flaw allows for Signature Spoofing by improper validation, affecting versions 26.8.2 before 26.9.1 . The ...

CVE-2026-85531 Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

EUVD-2026-95747

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

CVE-2026-85531 Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

CVE-2026-85531: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

PT-2026-108892

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

Sipay Electronic Money and Payment Services OpenCart Virtual POS Module encryption issues vulnerability

Versions 26.8.2 through 26.9.1 of the Sipay Electronic Money and Payment Services OpenCart Virtual POS Module contain an encryption-related vulnerability. This vulnerability stems from improper validation of encrypted signatures, potentially leading to signature spoofing...

CVE-2026-84437

A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/address.php of the component Autocomplete Workflow. The manipulation of the argument address1 results in cross site scripting. It is possible to launch the...