CVE-2010-1610

Cross-site request forgery CSRF vulnerability in index.php in OpenCart 1.4 allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to "user/user/insert." NOTE: some of...

CVE-2010-1610

OpenCart CSRF vulnerability CVE-2010-1610 affects OpenCart 1.4 and older versions (OpenCart

CVE-2010-1610

Cross-site request forgery CSRF vulnerability in index.php in OpenCart 1.4 allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to "user/user/insert." NOTE: some of...

OpenCart <= 1.3.2 'page' Parameter SQLi Vulnerability

OpenCart is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

OpenCart 'page' Parameter SQL Injection Vulnerability

OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

OpenCart <= 1.3.2 SQLi Vulnerability

OpenCart is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:opencart:opencart";...

CVE-2010-0956

SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-0956

CVE-2010-0956 affects OpenCart 1.3.2 where the vulnerable component is the application’s frontend logic in the index.php file. The vulnerability is an SQL injection via the page parameter , caused by insufficient sanitization of user input before using it in an SQL query. The impact is remote arb...

CVE-2010-0956

SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...

OpenCart 1.3.2 SQL Injection

Andrés Gómez Exploit Title : OpenCart 1.3.2 SQL Injection Date : 07/03/2010 Author : Andrés Gómez Software Link : http://www.coompras.com/opencart/opencart.htm Contact : gomezandres4tadinetdotcom.uy Dork : No DoRk An attacker may execute arbitrary SQL statements on the vulnerable system. This may...

OpenCart 1.3.2 - page SQL Injection

OpenCart 1.3.2 - page SQL Injection source: https://www.securityfocus.com/bid/38605/info OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

OpenCart 1.3.2 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================== OpenCart 1.3.2 SQL Injection Vulnerability ========================================== Andres Gomez Exploit Title : OpenCart 1.3.2 SQL Injection Date : 07/03/2010 Author : Andres Gomez Software Lin...

OpenCart 1.3.2 - 'page' SQL Injection

source: https://www.securityfocus.com/bid/38605/info OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

OpenCart CSRF Vulnerability

Advisory Information: Title: OpenCart CSRF Vulnerability Advisory URL: http://blog.visionsource.org/2010/01/28/opencart-csrf-vulnerability/ Date published: 2010-01-28 Vendors contacted: OpenCart Security Risk: High Vulnerability Description: OpenCart is vulnerable to CSRF attacks using the POST...

OpenCart Cross Site Request Forgery

Advisory Information: Title: OpenCart CSRF Vulnerability Advisory URL: http://blog.visionsource.org/2010/01/28/opencart-csrf-vulnerability/ Date published: 2010-01-28 Vendors contacted: OpenCart Security Risk: High Vulnerability Description: OpenCart is vulnerable to CSRF attacks using the POST...

CVE-2009-1621

Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. dot dot in the route parameter...

Directory traversal

Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. dot dot in the route parameter...

CVE-2009-1621

Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a .. dot dot in the route parameter...

CVE-2009-1621

CVE-2009-1621 affects OpenCart 1.1.8 where index.php's route parameter is not properly sanitized, causing a local file include (LFI). An attacker can read arbitrary files and, in some configurations, possibly execute PHP code under the webserver user. References describe OpenCart LFI in 1.1.8 and...