CVE-2022-34972

So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the attvalueid , manuvalueid , optvalueid , and subcatevalueid parameters at /index.php?route=extension/module/sofiltershopby/filterdata...

CVE-2022-34972

creationtimestamp| type| source ---|---|--- 2022-07-06 08:45:22+00:00| seen| https://t.me/cibsecurity/45623...

CVE-2022-34972

CVE-2022-34972 affects So Filter Shop By (OpenCart) v3.x, exposing multiple blind SQL injection vulnerabilities via the att_value_id, manu_value_id, opt_value_id, and subcate_value_id parameters in /index.php?route=extension/module/so_filter_shop_by/filter_data. Root cause: unsafely constructed S...