14 matches found
EUVD-2025-1688
Malicious code in bioql PyPI...
CVE-2025-0460
A vulnerability, which was classified as critical, was found in Blog Botz for Journal Theme 1.0 on OpenCart. This affects an unknown part of the file /index.php?route=extension/module/blogadd. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the atta...
CVE-2025-0460 Blog Botz for Journal Theme blog_add unrestricted upload
A vulnerability, which was classified as critical, was found in Blog Botz for Journal Theme 1.0 on OpenCart. This affects an unknown part of the file /index.php?route=extension/module/blogadd. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the atta...
CVE-2025-0460
The CVE-2025-0460 entry concerns Blog Botz for Journal Theme 1.0 on OpenCart. Affected: Blog Botz for Journal Theme, version 1.0, via the endpoint /index.php?route=extension/module/blog_add. Root cause: manipulation of the image parameter enables unrestricted file upload. Impact: remote attacker ...
PT-2025-3896 · Opencart · Blog Botz For Journal Theme
Name of the Vulnerable Software and Affected Versions: Blog Botz for Journal Theme version 1.0 on OpenCart Description: A critical vulnerability was found in Blog Botz for Journal Theme on OpenCart, affecting an unknown part of the file /index.php?route=extension/module/blog add. The manipulation...
WordPress Adventure Journal theme <= 1.7.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Adventure Journal versions = 1.7.2...
OpenCart Theme Journal 3.1.0 - Sensitive Data Exposure
Exploit Title: OpenCart Theme Journal 3.1.0 - Sensitive Data Exposure Date: 11-06-2020 Vendor Homepage: https://www.journal-theme.com/ Vendor Changelog: https://docs.journal-theme.com/changelog Exploit Author: Jinson Varghese Behanan @JinsonCyberSec Author Advisory:...
Journal theme information leakage vulnerability
OpenCart is a Hong Kong, China OpenCart company's set of open source e-commerce system. The system provides product reviews , product ratings , product additions and other modules. journal theme is one of the Journal website theme plugin . Journal theme 3.1.0 before the version OpenCart there is ...
CVE-2020-15478
The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...
CVE-2020-15478
The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...
Code injection
The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...
CVE-2020-15478
The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...
CVE-2020-15478
CVE-2020-15478 affects the Journal theme for OpenCart prior to 3.1.0. The vulnerability allows exposure of sensitive data through errors surface when handling SQL in the page parameter (the exact root cause described across sources indicates improper handling that leads to data exposure). Affecte...
WordPress The Journal Theme - Remote Code Execution
There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...