Lucene search
K

8 matches found

Check Point Advisories
Check Point Advisories
added 2022/11/22 12:0 a.m.21 views

OpenCart Remote Code Execution (CVE-2022-24108)

A remote code execution vulnerability exists in Skyoftech So Listing Tabs module for OpenCart. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.3AI score0.3776EPSS
Exploits3
NVD
NVD
added 2022/05/17 4:15 p.m.12 views

CVE-2022-24108

The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause DoS, and achieve remote code execution because of deserialization of untrusted...

9.8CVSS0.3776EPSS
Exploits3References4
ATTACKERKB
ATTACKERKB
added 2022/05/17 4:15 p.m.3 views

CVE-2022-24108

The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause DoS, and achieve remote code execution because of deserialization of untrusted...

9.8CVSS6.5AI score0.3776EPSS
Exploits3References5
OSV
OSV
added 2022/05/17 4:15 p.m.1 views

CVE-2022-24108

The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause DoS, and achieve remote code execution because of deserialization of untrusted...

9.8CVSS7.9AI score0.3776EPSS
Exploits3References4
Prion
Prion
added 2022/05/17 4:15 p.m.11 views

Deserialization of untrusted data

The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause DoS, and achieve remote code execution because of deserialization of untrusted...

7.5CVSS9.7AI score0.3776EPSS
Exploits3References4Affected Software1
CVE
CVE
added 2022/05/17 3:55 p.m.70 views

CVE-2022-24108

The CVE-2022-24108 entry concerns Skyoftech So Listing Tabs module version 2.2.0 for OpenCart. A remote attacker can inject a PHP-serialized object via the module’s setting parameter, which leads to deserialization of untrusted data. This can enable arbitrary file writes on the server, DoS, and r...

9.8CVSS9.8AI score0.3776EPSS
Exploits3References4Affected Software1
Cvelist
Cvelist
added 2022/05/17 3:55 p.m.14 views

CVE-2022-24108

The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause DoS, and achieve remote code execution because of deserialization of untrusted...

10AI score0.3776EPSS
Exploits3References4
CNNVD
CNNVD
added 2022/05/17 12:0 a.m.4 views

OpenCart 代码问题漏洞

Opencart is an open source e-commerce system by Opencart team. The system provides modules for product reviews, product ratings, and product additions. A security vulnerability exists in the Skyoftech So Listing Tabs module for OpenCart version 2.2.0, which can be exploited by remote attackers to...

9.8CVSS8.4AI score0.3776EPSS
Exploits3References6
Rows per page
Query Builder