Lucene search
K

8 matches found

OSV
OSV
added 2025/04/23 9:45 a.m.8 views

BIT-OPENCART-2024-36694

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

7.2CVSS7AI score0.00978EPSS
Exploits1References6
OSV
OSV
added 2024/12/18 9:30 p.m.4 views

GHSA-J2V2-3784-VR44 Duplicate Advisory: openCart Server-Side Template Injection (SSTI) vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xrh7-2gfq-4rcq. This link is maintained to preserve external references. Original Description OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

7.2CVSS7AI score0.00978EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2024/12/18 9:30 p.m.16 views

Duplicate Advisory: openCart Server-Side Template Injection (SSTI) vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xrh7-2gfq-4rcq. This link is maintained to preserve external references. Original Description OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

7.2CVSS7.3AI score0.00978EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2024/12/18 8:15 p.m.10 views

CVE-2024-36694

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

7.2CVSS0.00978EPSS
Exploits1References5
OSV
OSV
added 2024/12/18 8:15 p.m.9 views

CVE-2024-36694

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

7.2CVSS7AI score0.00978EPSS
Exploits1References5
CVE
CVE
added 2024/12/18 12:0 a.m.50 views

CVE-2024-36694

OpenCart 4.0.2.3 is affected by a Server-Side Template Injection (SSTI) in the Theme Editor Function. The root cause is improper validation/sanitization of user input within the Theme Editor, allowing server-side template code execution. Documented impact indicates potential high severity with se...

7.2CVSS7.5AI score0.00978EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/12/18 12:0 a.m.12 views

CVE-2024-36694

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

0.00978EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/07/17 12:0 a.m.4 views

PT-2024-27131

Name of the Vulnerable Software and Affected Versions OpenCart version 4.0.2.3 Description The issue is related to a Server-Side Template Injection SSTI vulnerability via the Theme Editor Function. This allows attackers to execute arbitrary code by injecting a crafted payload. Recommendations For...

7.2CVSS6.1AI score0.00978EPSS
Exploits1References17
Rows per page
Query Builder