KashmirBlack Botnet Hijacks Thousands of Sites Running On Popular CMS Platforms

An active botnet comprising hundreds of thousands of hijacked systems spread across 30 countries is exploiting "dozens of known vulnerabilities" to target widely-used content management systems CMS. The "KashmirBlack" campaign, which is believed to have started around November 2019, aims for...

esanshar.com Cross Site Request Forgery vulnerability OBB-1352719

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Journal theme information leakage vulnerability

OpenCart is a Hong Kong, China OpenCart company's set of open source e-commerce system. The system provides product reviews , product ratings , product additions and other modules. journal theme is one of the Journal website theme plugin . Journal theme 3.1.0 before the version OpenCart there is ...

CVE-2020-15478

The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...

CVE-2020-15478

The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...

Code injection

The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...

CVE-2020-15478

The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors...

CVE-2020-15478

CVE-2020-15478 affects the Journal theme for OpenCart prior to 3.1.0. The vulnerability allows exposure of sensitive data through errors surface when handling SQL in the page parameter (the exact root cause described across sources indicates improper handling that leads to data exposure). Affecte...

OpenCart Cross-Site Scripting Vulnerability (CNVD-2020-35932)

OpenCart is an open source e-commerce system OpenCart company in Hong Kong, China . The system provides product reviews, product ratings, product additions and other modules. A cross-site scripting vulnerability exists in OpenCart version 3.0.3.3. The vulnerability stems from a lack of proper...

CVE-2020-13980

OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists because of an incomplete fix for CVE-2020-10596. The vendor states "this is not a massive issue as you...

CVE-2020-13980

OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists because of an incomplete fix for CVE-2020-10596. The vendor states "this is not a massive issue as you...

Design/Logic Flaw

OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists because of an incomplete fix for CVE-2020-10596. The vendor states "this is not a massive issue as you...

CVE-2020-13980

OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists because of an incomplete fix for CVE-2020-10596. The vendor states "this is not a massive issue as you...

CVE-2020-13980

OpenCart 3.0.3.3 is vulnerable to a cross-site scripting (XSS) issue triggered by a crafted filename in the users’ image upload section. The root cause is a lack of proper entity encoding in filenames, and this issue is noted as a follow-up to an incomplete fix for CVE-2020-10596. The vulnerabili...

PT-2020-13815 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart version 3.0.3.3 Description: The issue allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. This problem exists due to an incomplete...

lds.com.np Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1188761 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

OpenCart 3.0.3.2 Cross Site Scripting

Exploit Title: OpenCart 3.0.3.2 - Stored Cross Site Scripting Authenticated Date: 2020-06-01 Exploit Author: Kailash Bohara Vendor Homepage: https://www.opencart.com Software Link: https://www.opencart.com/index.php?route=cms/download Version: OpenCart UsersUsers and click on Action button on top...

OpenCart 3.0.3.2 - Stored Cross Site Scripting (Authenticated) Vulnerability

Exploit for php platform in category web applications Exploit Title: OpenCart 3.0.3.2 - Stored Cross Site Scripting Authenticated Exploit Author: Kailash Bohara Vendor Homepage: https://www.opencart.com Software Link: https://www.opencart.com/index.php?route=cms/download Version: OpenCart...

OpenCart 3.0.3.2 - Stored Cross Site Scripting (Authenticated)

Exploit Title: OpenCart 3.0.3.2 - Stored Cross Site Scripting Authenticated Date: 2020-06-01 Exploit Author: Kailash Bohara Vendor Homepage: https://www.opencart.com Software Link: https://www.opencart.com/index.php?route=cms/download Version: OpenCart UsersUsers and click on Action button on top...

Open Redirect in OpenCart

Advisory ID Internal CORE-2020-0006 1. Advisory Information Title: Open Redirect in OpenCart Advisory ID: CORE-2020-0006 Advisory URL: https://www.coresecurity.com/advisories/open-redirect-opencart Date published: 2020-05-04 Date of last update: 2020-05-04 Vendors contacted: OpenCart Release mode...