Sql injection

OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/sonewlettercustompopup/newsletter...

CVE-2022-41403

OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/sonewlettercustompopup/newsletter...

PT-2022-25844 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart versions 3.x Description: A SQL injection issue was found in the Newsletter Custom Popup module of OpenCart. The vulnerability can be exploited via the email parameter at the "index.php?route=extension/module/so newletter custom...

OpenCart SQL注入漏洞

OpenCart is an open source e-commerce system by OpenCart team. The system provides modules for product reviews, product ratings, and product additions. A security vulnerability exists in OpenCart version 3.x, which originates from the email parameter of its Newsletter Custom Popup module URL:...

CVE-2022-41403

OpenCart 3.x Newsletter Custom Popup contains a SQL injection vulnerability in the email parameter of the endpoint index.php?route=extension/module/so_newletter_custom_popup/newsletter. The CVE-2022-41403 entry is rated CRITICAL (CVSSv3.1: 9.8) with network attack vector, no authentication, and h...

CVE-2022-41403: Improper Neutralization of Special Elements used in an SQL Command

OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/sonewlettercustompopup/newsletter...

CVE-2022-41403

OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/sonewlettercustompopup/newsletter...

jCart For OpenCart 3.0.3.19 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

jCart for OpenCart, jCart for OpenCart 3.0.3.19, XSS (Cross Site Scripting)

Here is the link on our site: https://extensions.soft-php.com/support/latest-news/79-joocart-jcart-30325-release-notice.html...

OpenCart 3.x Newsletter Custom Popup 4.0 SQL Injection

Exploit Title: OpenCart v3.x So Newsletter Custom Popup Module - Blind SQL Injection Date: 18/09/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.opencart.com/ Software Link:...

OpenCart 3.x Newsletter Custom Popup 4.0 SQL Injection Vulnerability

Exploit Title: OpenCart v3.x So Newsletter Custom Popup Module - Blind SQL Injection Exploit Author: Saud Alenazi Vendor Homepage: https://www.opencart.com/ Software Link:...

So Filter Shop By SQL注入漏洞

So Filter Shop By is an advanced AJAX product filter for OpenCart. A SQL injection vulnerability exists in the So Filter Shop By v3.x series of releases that stems from issues with the attvalueid, manuvalueid, optvalueid, and subcatevalueid parameters...

OpenCart 3.x So Filter Shop By SQL Injection Vulnerability

Exploit Title: OpenCart v3.x So Filter Shop By - Blind SQL Injection Exploit Author: Saud Alenazi Vendor Homepage: https://www.opencart.com/ Software Link: https://codecanyon.net/item/so-filter-shop-by-responsive-opencart-module/13945633 Version: V3.X Tested on: XAMPP, Linux Contact:...

OpenCart 3.x So Filter Shop By SQL Injection

Exploit Title: OpenCart v3.x So Filter Shop By - Blind SQL Injection Date: 28/06/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.opencart.com/ Software Link: https://codecanyon.net/item/so-filter-shop-by-responsive-opencart-module/13945633 Version: V3.X Tested on: XAMPP, Linux...

CVE-2013-1891

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed...

Design/Logic Flaw

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed...

CVE-2013-1891

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed...

CVE-2013-1891

OpenCart 1.4.7–1.5.5.1 contains a directory traversal vulnerability in filemanager.php where the anti-traversal check is ineffective and can be bypassed. This affects code handling file paths, enabling potential access outside the intended directory structure. The CVE notes indicate an impact on ...

CVE-2013-1891: Improper Limitation of a Pathname to a Restricted Directory

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed...

GHSA-87CV-57P8-J33X OpenCart Cross-site Scripting (XSS) in the Subject field of mail.

OpenCart 3.0.3.6 is affected by cross-site scripting XSS in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS triggers and the attacker can able to steal...