EUVD-2015-4690

Malware in sbrugna...

OpenCart Cross-Site Scripting Vulnerability

OpenCart is an open source e-commerce system. The OpenCart index.php script fails to adequately filter the 'zoneid' parameter, allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user...

Cross site scripting

Cross-site scripting XSS vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zoneid parameter to index.php...