CVE-2023-47444

An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on the underlying server...

CVE-2023-47444

An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on the underlying server...

CVE-2023-47444: Improper Control of Generation of Code

An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on the underlying server...

OpenCart Path Traversal Vulnerability

OpenCart is a powerful open source e-commerce platform that helps users to quickly build and manage their own online stores. It provides rich functionality and flexible customization options to meet different users' needs. With OpenCart, users can easily add products, process orders, manage...

OpenCart Path Traversal vulnerability

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

GHSA-V4J2-CWMM-XG89 OpenCart Path Traversal vulnerability

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

CVE-2023-2315

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

Path traversal

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

OpenCart 路径遍历漏洞

OpenCart is a powerful open source e-commerce platform that helps users to quickly build and manage their own online stores. It provides rich functionality and flexible customization options to meet different users' needs. With OpenCart, users can easily add products, process orders, manage...

CVE-2023-2315

CVE-2023-2315 is a path traversal vulnerability in OpenCart versions 4.0.0.0–4.0.2.2. An authenticated user with access/modify privileges on the Log component can empty arbitrary files on the server. Root cause: path traversal in the Log component. Impact: file deletion/emptiness on the server as...

CVE-2023-2315 Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

CVE-2023-2315 Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

CVE-2023-2315 Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

CVE-2023-2315: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

PT-2023-18859 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart versions 4.0.0.0 through 4.0.2.2 Description: The issue allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server. This is due to a Path Traversal vulnerability...

CVE-2023-40834

OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter...

CVE-2023-40834

OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter...

Default credentials

OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter...

CVE-2023-40834

OpenCart CMS v4.0.2.2 is vulnerable on its login page to brute-force attacks due to lack of protection against excessive login attempts. Unauthenticated attackers can repeatedly target the password parameter to gain access. Public references (e.g., PacketStorm exploit details) confirm a brute-for...

CVE-2023-40834: Improper Restriction of Excessive Authentication Attempts

OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter...