Design/Logic Flaw

OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing feature of the Categories, Product, and Information pages...

CVE-2019-15081

OpenCart 3.x is affected. The vulnerability is a stored XSS in the admin panel’s Source/HTML editing for Categories, Product, and Information pages, exploitable when an attacker has login access. Root cause: unsanitized input in the admin editing feature allows arbitrary JavaScript execution on t...

CVE-2019-15081

OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing feature of the Categories, Product, and Information pages...

PT-2019-13973 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart versions 3.x Description: The issue allows stored XSS within the Source/HTML editing feature of the Categories, Product, and Information pages when an attacker has login access to the admin panel. Recommendations: For OpenCart versio...

prophete.de Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-932783 Security Researcher metamorfosec Helped patch 1990 vulnerabilities Received 9 Coordinated Disclosure badges Received 32 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting prophete.de website an...

merebuy.net Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-932782 Security Researcher metamorfosec Helped patch 1990 vulnerabilities Received 9 Coordinated Disclosure badges Received 32 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting merebuy.net website an...

neutec.com.de Cross Site Request Forgery vulnerability

Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting neutec.com.de website and its users. Following...

Opencart 2.3.0.2 Insecure OCMod Generation Remote Command Execution Exploit

Exploit for php platform in category web applications -- !--...

Opencart 2.3.0.2 Insecure OCMod Generation Remote Command Execution

-- 1.0 Todor Donev mailto:[email protected] a...

store.mapsofworld.com Cross Site Request Forgery vulnerability

Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting store.mapsofworld.com website and its users. Followin...

VulnX v1.7 - An Intelligent Bot Auto Shell Injector That Detect Vulnerabilities In Multiple Types Of CMS

VulnX Wiki • How To Use • Compatibility • Library • Vulnx is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms, fast cms detection, information gathering and vulnerability Scanning of the target like subdomains, IP addresses, country, org, timezone,...

Opencart extension/feed/google_base denial of service vulnerability (CNVD-2019-23126)

OpenCart is an open source e-commerce system from OpenCart China . The system provides product reviews, product ratings, product additions and other modules. A denial of service vulnerability exists in Opencart 3.0.3.2 extension/feed/googlebase, which can be exploited by an attacker to cause a...

Opencart 3.0.3.2 - (extension/feed/google_base) Denial of Service Exploit

Exploit for php platform in category web applications !/bin/bash Opencart PoC exploit, just for test... Tested on store with added more than 1000 products Usage: ./cartkiller.sh storeurl threads sleep Example: ./cartkiller.sh https://storename 50 5 Disclaimer: This or previous programs is for...

Opencart 3.0.3.2 - extensionfeedgoogle_base Denial of Service PoC

Opencart 3.0.3.2 - extensionfeedgooglebase Denial of Service PoC !/bin/bash Opencart PoC exploit, just for test... Tested on store with added more than 1000 products Usage: ./cartkiller.sh storeurl threads sleep Example: ./cartkiller.sh https://storename 50 5 Disclaimer: This or previous programs...

Opencart 3.0.3.2 - 'extension/feed/google_base' Denial of Service (PoC)

!/bin/bash Opencart PoC exploit, just for test... Tested on store with added more than 1000 products Usage: ./cartkiller.sh storeurl threads sleep Example: ./cartkiller.sh https://storename 50 5 Disclaimer: This or previous programs is for Educational purpose ONLY. Do not use it without permissio...

Opencart 3.0.3.2 extension/feed/google_base Denial Of Service

!/bin/bash Opencart PoC exploit, just for test... Tested on store with added more than 1000 products Usage: ./cartkiller.sh storeurl threads sleep Example: ./cartkiller.sh https://storename 50 5 Disclaimer: This or previous programs is for Educational purpose ONLY. Do not use it without permissio...

OpenCart Price Comparison Store 3.x Open Redirection

Exploit Title : OpenCart Price Comparison Store Modules 3.x Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 11/03/2019 Vendor Homepage : opencart.com Software Information Link :...

SQL Injection Vulnerability in OpenCart

OpenCart is an open source e-commerce building system developed using PHP. The system is easy to install, powerful, simple to operate, and supports multi-language, multi-currency and multi-store. OpenCart Chinese free version v3.0 there are SQL injection vulnerabilities , the vulnerability stems...

OpenCart-Overclocked Cross-Site Scripting Vulnerability

OpenCart-Overclocked is an open source shopping cart application. A cross-site scripting vulnerability exists in upload/admin/view/template/extension/openbay.tplL95 in OpenCart-Overclocked 1.11.1 and earlier versions, which stems from the program not filtering user input. A remote attacker could...

Cross-site Scripting (XSS)

villagedefrance/opencart-overclocked is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the $GET'token' variable in OpenCart-Overclocked/upload/admin/view/template/extension/openbay.tpl, allowing a malicious user to inject and execute arbitrary code...