768 matches found
OpenCart SQL Injection Vulnerability (CNVD-2024-30068)
OpenCart is an open source e-commerce system from the OpenCart team in Hong Kong, China. The system provides product reviews, product ratings, product additions and other modules. OpenCart 3.0.3.7 version of the existence of SQL injection vulnerability , an attacker can exploit the vulnerability...
Information Disclosure
OpenCart is vulnerable to information disclosure. The vulnerability exists in multiple functions of backup.php, allowing an attacker to obtain database information or read server files by injecting and executing malicious SQL queries...
GHSA-236J-RFX5-WQ38 OpenCart SQL injection vulnerability
OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background...
OpenCart SQL injection vulnerability
OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background...
CVE-2021-37823
OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background...
CVE-2021-37823
OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background...
Sql injection
OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background...
OpenCart SQL注入漏洞
OpenCart is an open source e-commerce system from the OpenCart team in Hong Kong, China. The system provides product reviews, product ratings, product additions and other modules. OpenCart 3.0.3.7 version of the existence of SQL injection vulnerability , an attacker can exploit the vulnerability...
CVE-2021-37823
OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background...
PT-2022-10672 · Opencart · Opencart
Name of the Vulnerable Software and Affected Versions: OpenCart version 3.0.3.7 Description: The issue allows users to obtain database information or read server files through SQL injection in the background. This can potentially lead to unauthorized access to sensitive data. Recommendations: For...
CVE-2021-37823
OpenCart 3.0.3.7 is affected by a background SQL injection (CVE-2021-37823) that can allow an attacker to obtain database information or read server files. The root cause is an SQL injection in the OpenCart background handling. The connected sources indicate PoC exploitation exists (per ADP data)...
CVE-2021-37823
OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background...
CVE-2022-41403
OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/sonewlettercustompopup/newsletter...
CVE-2022-41403
OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/sonewlettercustompopup/newsletter...
Sql injection
OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/sonewlettercustompopup/newsletter...
CVE-2022-41403
OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=extension/module/sonewlettercustompopup/newsletter...
PT-2022-25844 · Opencart · Opencart
Name of the Vulnerable Software and Affected Versions: OpenCart versions 3.x Description: A SQL injection issue was found in the Newsletter Custom Popup module of OpenCart. The vulnerability can be exploited via the email parameter at the "index.php?route=extension/module/so newletter custom...
OpenCart SQL注入漏洞
OpenCart is an open source e-commerce system by OpenCart team. The system provides modules for product reviews, product ratings, and product additions. A security vulnerability exists in OpenCart version 3.x, which originates from the email parameter of its Newsletter Custom Popup module URL:...
CVE-2022-41403
OpenCart 3.x Newsletter Custom Popup contains a SQL injection vulnerability in the email parameter of the endpoint index.php?route=extension/module/so_newletter_custom_popup/newsletter. The CVE-2022-41403 entry is rated CRITICAL (CVSSv3.1: 9.8) with network attack vector, no authentication, and h...