Joomla! Component jCart for OpenCart 2.0 - 'product_id' SQL Injection

Exploit Title: Joomla! Component jCart for OpenCart v2.0 - SQL Injection Google Dork: N/A Date: 20.03.2017 Vendor Homepage: http://soft-php.com Software: https://extensions.joomla.org/extensions/extension/e-commerce/e-commerce-integrations/jcart-for-opencart/ Demo: http://demos.soft-php.com/jcart...

Hackers with Credit Card Scrapers Continue to Target Magento

Attackers continue to take aim at the e-commerce platform Magento. Researchers said last week they came across a malicious function snuck into one of the platform’s modules in order to steal credit card information. Code for the function was injected into a .php file for SF9 Realex, a module that...

OpenCart 2.0.3.1 Cross Site Scripting

OpenCart 2.0.3.1 Cross Site Scripting Vulnerability Information -------------------- Author: Hamed Izadi Email: "hamedizadi", "@", "gmail", ".com"; Name: XSS Vulnerability in OpenCart Affected Software : OpenCart Affected Versions: v2.0.3.1 and possibly below Vendor Homepage :...

OpenCart 'helper/json.php' Remote PHP Code Execution Vulnerability

OpenCart is an open source e-commerce system of China OpenCart company . OpenCart fails to properly validate user-submitted input, allowing remote attackers to exploit the vulnerability by submitting special requests to execute arbitrary PHP code...

Opencart的 json_decode 函数PHP远程代码执行漏洞

No description provided by source...

OpenCart json_decode function 远程代码执行漏洞

No description provided by source...

OpenCart 2.1.0.2 2.2.0.0 - json_decode Function Remote Code Execution

OpenCart 2.1.0.2 2.2.0.0 - jsondecode Function Remote Code Execution OpenCart jsondecode function Remote PHP Code Execution Author: Naser Farhadi Twitter: @naserfarhadi Date: 9 April 2016 Version: 2.1.0.2 to 2.2.0.0 Latest version Vendor Homepage: http://www.opencart.com/ Vulnerability:...

OpenCart 2.2.0.0 Remote PHP Code Execution

OpenCart jsondecode function Remote PHP Code Execution Author: Naser Farhadi Twitter: @naserfarhadi Date: 9 April 2016 Version: 2.1.0.2 to 2.2.0.0 Latest version Vendor Homepage: http://www.opencart.com/ Vulnerability: ------------ /upload/system/helper/json.php $match = '/".??!\\"/'; $string =...

OpenCart 2.1.0.2 to 2.2.0.0 - json_decode Function Remote Code Execution

Exploit for php platform in category web applications OpenCart jsondecode function Remote PHP Code Execution Author: Naser Farhadi Twitter: @naserfarhadi Date: 9 April 2016 Version: 2.1.0.2 to 2.2.0.0 Latest version Vendor Homepage: http://www.opencart.com/ Vulnerability: ------------...

OpenCart 2.1.0.2 < 2.2.0.0 - json_decode Function Remote Code Execution

OpenCart jsondecode function Remote PHP Code Execution Author: Naser Farhadi Twitter: @naserfarhadi Date: 9 April 2016 Version: 2.1.0.2 to 2.2.0.0 Latest version Vendor Homepage: http://www.opencart.com/ Vulnerability: ------------ /upload/system/helper/json.php $match = '/".??!\\"/'; $string =...

OpenCart Cross-Site Scripting Vulnerability

OpenCart is an open source e-commerce system. The OpenCart index.php script fails to adequately filter the 'zoneid' parameter, allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user...

CVE-2015-4671

Cross-site scripting XSS vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zoneid parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zoneid parameter to index.php...

CVE-2015-4671

Cross-site scripting XSS vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zoneid parameter to index.php...

CVE-2015-4671

OpenCart CVE-2015-4671 affects OpenCart prior to 2.1.0.2. The vulnerability is a Cross‑Site Scripting (XSS) flaw in the index.php page, exploitable via the zone_id parameter due to insufficient input filtering. The root cause is improper validation/escaping of zone_id, allowing remote attackers t...

CVE-2015-4671

Cross-site scripting XSS vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zoneid parameter to index.php...

CVE-2015-4671: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zoneid parameter to index.php...

PT-2016-3622

Name of the Vulnerable Software and Affected Versions OpenCart versions prior to 2.1.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via the zone id parameter to "index.php". This can lead to cross-site scripting XSS attacks. Recommendations For versions...

OpenCart 2.1.0.1 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: XSS Vulnerability in OpenCart Affected Software : OpenCart Affected Versions: v2.1.0.1 and possibly below Vendor Homepage : http://www.opencart.com Vulnerability Type : Cross-site Scripting Severity : Important Status : Fixed CVE-ID :...

OpenCart 2.0.3.1 Cross Site Request Forgery Vulnerability

OpenCart version 2.0.3.1 suffers from a cross site request forgery vulnerability. 1. Introduction Affected Product: OpenCart 2.0.3.1 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: https://www.opencart.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 09/01/201...