95 matches found
CVE-2018-25336 jCart for OpenCart 2.3.0.2 Cross-Site Request Forgery
jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft malicious HTML forms targeting endpoints , and to change user credentials, passwords, and affiliate account details...
CVE-2018-25336
Joomla jCart for OpenCart 2.3.0.2 has a cross-site request forgery (CSRF) vulnerability. The issue allows an attacker to modify user account information without authentication by crafting malicious HTML forms targeting endpoints, resulting in changes to user credentials, passwords, and affiliate ...
User Impersonation
Overview opencart/opencart is a shopping cart system Affected versions of this package are vulnerable to User Impersonation via the OCSESSID cookie. An attacker can gain unauthorized access to user accounts by injecting arbitrary values into the session cookie, allowing session takeover...
Cross-site Request Forgery (CSRF)
Overview opencart/opencart is a shopping cart system Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the /account/edit endpoint. An attacker can alter account details, such as email addresses, by tricking users into visiting malicious pages, and subsequentl...
CVE-2021-47953
OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint. Attackers can trick authenticated users into submitting hidden forms with new password values in the 'password' and...
CVE-2021-47953
OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint. Attackers can trick authenticated users into submitting hidden forms with new password values in the 'password' and...
CVE-2021-47953 OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password
OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint. Attackers can trick authenticated users into submitting hidden forms with new password values in the 'password' and...
OpenCart 安全漏洞
OpenCart is an open-source e-commerce system developed by the OpenCart team in China. This system provides modules for product reviews, product ratings, and product addition. Version 3.0.3.8 of OpenCart has a security vulnerability, which stems from a session fixation vulnerability. This...
CVE-2018-1000640
OpenCart-Overclocked version =1.11.1 contains a Cross Site Scripting XSS vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be...
EUVD-2009-1616
Malware in sbrugna...
EUVD-2013-1889
Malware in sbrugna...
EUVD-2010-1636
Malware in sbrugna...
EUVD-2016-1691
Malware in sbrugna...
EUVD-2011-3720
Malware in sbrugna...
EUVD-2025-2014
Malicious code in bioql PyPI...
EUVD-2024-45635
Malicious code in bioql PyPI...
EUVD-2022-3619
Malicious code in bioql PyPI...
EUVD-2022-5664
Malicious code in bioql PyPI...
EUVD-2025-5963
Malicious code in bioql PyPI...
EUVD-2024-2153
Malicious code in bioql PyPI...