OpenCart 'page' Parameter SQL Injection Vulnerability

OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

OpenCart <= 1.3.2 SQLi Vulnerability

OpenCart is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:opencart:opencart";...

CVE-2010-0956

SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-0956

CVE-2010-0956 affects OpenCart 1.3.2 where the vulnerable component is the application’s frontend logic in the index.php file. The vulnerability is an SQL injection via the page parameter , caused by insufficient sanitization of user input before using it in an SQL query. The impact is remote arb...

CVE-2010-0956

SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-0956: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

OpenCart 1.3.2 SQL Injection

Andrés Gómez Exploit Title : OpenCart 1.3.2 SQL Injection Date : 07/03/2010 Author : Andrés Gómez Software Link : http://www.coompras.com/opencart/opencart.htm Contact : gomezandres4tadinetdotcom.uy Dork : No DoRk An attacker may execute arbitrary SQL statements on the vulnerable system. This may...

OpenCart 1.3.2 - page SQL Injection

OpenCart 1.3.2 - page SQL Injection source: https://www.securityfocus.com/bid/38605/info OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

OpenCart 1.3.2 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================== OpenCart 1.3.2 SQL Injection Vulnerability ========================================== Andres Gomez Exploit Title : OpenCart 1.3.2 SQL Injection Date : 07/03/2010 Author : Andres Gomez Software Lin...

OpenCart 1.3.2 - 'page' SQL Injection

source: https://www.securityfocus.com/bid/38605/info OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

OpenCart CSRF Vulnerability

Advisory Information: Title: OpenCart CSRF Vulnerability Advisory URL: http://blog.visionsource.org/2010/01/28/opencart-csrf-vulnerability/ Date published: 2010-01-28 Vendors contacted: OpenCart Security Risk: High Vulnerability Description: OpenCart is vulnerable to CSRF attacks using the POST...

OpenCart Cross Site Request Forgery

Advisory Information: Title: OpenCart CSRF Vulnerability Advisory URL: http://blog.visionsource.org/2010/01/28/opencart-csrf-vulnerability/ Date published: 2010-01-28 Vendors contacted: OpenCart Security Risk: High Vulnerability Description: OpenCart is vulnerable to CSRF attacks using the POST...

CVE-2009-1621

Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. dot dot in the route parameter...

Directory traversal

Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. dot dot in the route parameter...

CVE-2009-1621

Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. dot dot in the route parameter...

CVE-2009-1621

CVE-2009-1621 affects OpenCart 1.1.8 where index.php's route parameter is not properly sanitized, causing a local file include (LFI). An attacker can read arbitrary files and, in some configurations, possibly execute PHP code under the webserver user. References describe OpenCart LFI in 1.1.8 and...

CVE-2009-1621: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. dot dot in the route parameter...

OpenCart route Parameter Local File Inclusion

The remote host is running OpenCart, an open source, PHP-based online shopping cart system. The version of OpenCart installed on the remote host fails to filter user-supplied input to the 'route' parameter of the 'index.php' script before using it to include PHP code in the 'execute' method in...

OpenCart Detection (HTTP)

HTTP based detection of OpenCart. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100178";...