CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Veracode•added 2017/09/04 6:0 a.m.•20 views

SQL Injection

OpenCart is vulnerable to SQL injection. The attacks exist because it does not sanitize the courierid parameter in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php, allowing the attackers to inject malicious SQL queries through it...

7.2CVSS7.5AI score0.00506EPSS

Exploits1References3Affected Software1

Prion•added 2017/08/31 8:29 p.m.•9 views

Sql injection

SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier aka courierid parameter to openbay.php...

6.5CVSS8.5AI score0.00506EPSS

Exploits1References2Affected Software1