store.mapsofworld.com Cross Site Request Forgery vulnerability

Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting store.mapsofworld.com website and its users. Followin...

VulnX v1.7 - An Intelligent Bot Auto Shell Injector That Detect Vulnerabilities In Multiple Types Of CMS

VulnX Wiki • How To Use • Compatibility • Library • Vulnx is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms, fast cms detection, information gathering and vulnerability Scanning of the target like subdomains, IP addresses, country, org, timezone,...

Opencart extension/feed/google_base denial of service vulnerability (CNVD-2019-23126)

OpenCart is an open source e-commerce system from OpenCart China . The system provides product reviews, product ratings, product additions and other modules. A denial of service vulnerability exists in Opencart 3.0.3.2 extension/feed/googlebase, which can be exploited by an attacker to cause a...

Opencart 3.0.3.2 - extensionfeedgoogle_base Denial of Service PoC

Opencart 3.0.3.2 - extensionfeedgooglebase Denial of Service PoC !/bin/bash Opencart PoC exploit, just for test... Tested on store with added more than 1000 products Usage: ./cartkiller.sh storeurl threads sleep Example: ./cartkiller.sh https://storename 50 5 Disclaimer: This or previous programs...

Opencart 3.0.3.2 - (extension/feed/google_base) Denial of Service Exploit

Exploit for php platform in category web applications !/bin/bash Opencart PoC exploit, just for test... Tested on store with added more than 1000 products Usage: ./cartkiller.sh storeurl threads sleep Example: ./cartkiller.sh https://storename 50 5 Disclaimer: This or previous programs is for...

Opencart 3.0.3.2 - 'extension/feed/google_base' Denial of Service (PoC)

!/bin/bash Opencart PoC exploit, just for test... Tested on store with added more than 1000 products Usage: ./cartkiller.sh storeurl threads sleep Example: ./cartkiller.sh https://storename 50 5 Disclaimer: This or previous programs is for Educational purpose ONLY. Do not use it without permissio...

Opencart 3.0.3.2 extension/feed/google_base Denial Of Service

!/bin/bash Opencart PoC exploit, just for test... Tested on store with added more than 1000 products Usage: ./cartkiller.sh storeurl threads sleep Example: ./cartkiller.sh https://storename 50 5 Disclaimer: This or previous programs is for Educational purpose ONLY. Do not use it without permissio...

OpenCart Price Comparison Store 3.x Open Redirection

Exploit Title : OpenCart Price Comparison Store Modules 3.x Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 11/03/2019 Vendor Homepage : opencart.com Software Information Link :...

SQL Injection Vulnerability in OpenCart

OpenCart is an open source e-commerce building system developed using PHP. The system is easy to install, powerful, simple to operate, and supports multi-language, multi-currency and multi-store. OpenCart Chinese free version v3.0 there are SQL injection vulnerabilities , the vulnerability stems...

OpenCart-Overclocked Cross-Site Scripting Vulnerability

OpenCart-Overclocked is an open source shopping cart application. A cross-site scripting vulnerability exists in upload/admin/view/template/extension/openbay.tplL95 in OpenCart-Overclocked 1.11.1 and earlier versions, which stems from the program not filtering user input. A remote attacker could...

Cross-site Scripting (XSS)

villagedefrance/opencart-overclocked is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the $GET'token' variable in OpenCart-Overclocked/upload/admin/view/template/extension/openbay.tpl, allowing a malicious user to inject and execute arbitrary code...

CVE-2018-1000640

OpenCart-Overclocked version =1.11.1 contains a Cross Site Scripting XSS vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be...

CVE-2018-1000640

OpenCart-Overclocked version =1.11.1 contains a Cross Site Scripting XSS vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be...

Cross site scripting

OpenCart-Overclocked version =1.11.1 contains a Cross Site Scripting XSS vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be...

CVE-2018-1000640

OpenCart-Overclocked version =1.11.1 contains a Cross Site Scripting XSS vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be...

CVE-2018-1000640

OpenCart-Overclocked (

Cross-Site Request Forgery (CSRF)

Opencart is vulnerable to cross-site request forgery CSRF attack. The library does not validate the user token during a password update, allowing a malicious user to change the password via a cross-site request forgery attack...

OpenCart Cross-Site Request Forgery Vulnerability (CNVD-2018-13873)

OpenCart is an open source e-commerce system from OpenCart China . The system provides product reviews, product ratings, product additions and other modules. A cross-site request forgery vulnerability exists in the /upload/catalog/controller/account/password.php file in OpenCart 3.0.2.0 and earli...

CVE-2018-13067

/upload/catalog/controller/account/password.php in OpenCart through 3.0.2.0 has CSRF via the index.php?route=account/password URI to change a user's password...

Cross site request forgery (csrf)

/upload/catalog/controller/account/password.php in OpenCart through 3.0.2.0 has CSRF via the index.php?route=account/password URI to change a user's password...