OpenCart 2.0.3.1 Cross Site Request Forgery Vulnerability

OpenCart version 2.0.3.1 suffers from a cross site request forgery vulnerability. 1. Introduction Affected Product: OpenCart 2.0.3.1 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: https://www.opencart.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 09/01/201...

OpenCart 2.0.3.1 Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: OpenCart 2.0.3.1 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: https://www.opencart.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 09/01/2015 Disclosed to public: 10/07/2015 Releas...

OpenCart 1.5.6.4 PHP Object Injection Vulnerability

Exploit for php platform in category web applications OpenCart session-data'cart' as $key = $quantity $product = explode':', $key; $productid = $product0; $stock = true; // Options if !empty$product1 $options = unserializebase64decode$product1; else $options = array; The vulnerability exists...

[KIS-2014-08] OpenCart <= 1.5.6.4 (cart.php) PHP Object Injection Vulnerability

----------------------------------------------------------------- OpenCart = 1.5.6.4 cart.php PHP Object Injection Vulnerability ----------------------------------------------------------------- - Software Link: http://www.opencart.com/ - Affected Versions: Version 1.5.6.4 and prior versions. -...

OpenCart 1.5.6.4 PHP Object Injection

----------------------------------------------------------------- OpenCart session-data'cart' as $key = $quantity 24. $product = explode':', $key; 25. $productid = $product0; 26. $stock = true; 27. 28. // Options 29. if !empty$product1 30. $options = unserializebase64decode$product1; 31. else 32...

OpenCart - Change User Password CSRF Vulnerability

No description provided by source. Exploit Title : OpenCart CSRF Date : 2013/4/2 Exploit Author : Saadat Ullah ? [email protected] Software Link : http://www.opencart.com/index.php?route=download/download : https://github.com/opencart Software web : www.opencart.com Author HomePage :...

OpenCart 1.5.5.1 (filemanager.php) - Directory Traversal Arbitrary File Access

No description provided by source. waraxe-2013-SA098 - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1 =============================================================================== Author: Janek Vind waraxe Date: 19. March 2013 Location: Estonia, Tartu Web:...

OpenCart 1.4.9 - Multiple Local File Inclusion Vulnerabilities

No description provided by source...

OpenCart 1.5.1.2 - Blind SQL Vulnerability

No description provided by source...

opencart 1.5.2.1 - Multiple Vulnerabilities

No description provided by source. Author: Janek Vind waraxe Date: 06. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-84.html Description of vulnerable software: OpenCart is a turn-key ready out of the box shopping cart solution. You simply install, select your template, a...

OpenCart 1.3.2 'page' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38605/info OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

OpenCart <= 1.5.6.1 - (openbay) Multiple SQL Injection

No description provided by source. Exploit Title : OpenCart = 1.5.6.1 SQL Injection Date : 2014/3/26 Exploit Author : Saadat Ullah ? [email protected] Software Link : http://www.opencart.com/index.php?route=download/download : https://github.com/opencart Software web : www.opencart.com...

Opencart 1.4.9.1 - Remote File Upload Vulnerability

No description provided by source. ========================================== Opencart remote file Upload Vulnerability ========================================== Exploit Title: Opencart remote file uploade Author: Net.Edit0r Email: [email protected] [email protected] Google dork:...

OpenCart 1.5.6.4 目录穿越漏洞

Directory Traversal Vulnerability In OpenCart 1.5.6.4 and old version @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ ...

Opencart <= 1.5.6.3 Upload Shell Vulnerability

Exploit for php platform in category web applications Exploit Title: Opencart Downloads and upload file This trick works by renaming the error log file from error.txt to error.php or whatever.php and make an wrong sql query in order to log it 1.Go to System - Settings - Edit Your Store - Server T...

OpenCart 1.5.6.1 - openbay Multiple SQL Injections

OpenCart 1.5.6.1 - openbay Multiple SQL Injections Exploit Title : OpenCart log'getEbayItemId - Product ID: '.$productid; $qry = $this-db-query"SELECT ebayitemid FROM " . DBPREFIX . "ebaylisting WHERE productid = '".$productid."' AND status = '1' LIMIT 1"; .............. Function is called on man...

OpenCart 1.5.6.1 SQL Injection Vulnerability

OpenCart versions 1.5.6.1 and below suffer from a remote SQL injection vulnerability. Exploit Title : OpenCart log'getEbayItemId - Product ID: '.$productid; $qry = $this-db-query"SELECT ebayitemid FROM " . DBPREFIX . "ebaylisting WHERE productid = '".$productid."' AND status = '1' LIMIT 1";...

OpenCart 1.5.6.1 - 'openbay' Multiple SQL Injections

Exploit Title : OpenCart log'getEbayItemId - Product ID: '.$productid; $qry = $this-db-query"SELECT ebayitemid FROM " . DBPREFIX . "ebaylisting WHERE productid = '".$productid."' AND status = '1' LIMIT 1"; .............. Function is called on many locations and paramter is passed without santize...

OpenCart 1.5.6.1 SQL Injection

Exploit Title : OpenCart log'getEbayItemId - Product ID: '.$productid; $qry = $this-db-query"SELECT ebayitemid FROM " . DBPREFIX . "ebaylisting WHERE productid = '".$productid."' AND status = '1' LIMIT 1"; .............. Function is called on many locations and paramter is passed without santize...

OpenCart <= 1.5.6 Multiple Vulnerabilities (Dec 2013)

OpenCart is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:opencart:opencart"; ifdescription...