Information Disclosure

2022-11-0403:18:52

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

opencart

vulnerability

backup.php

information disclosure

sql queries

EPSS

0.001

Percentile

32.8%

JSON

OpenCart is vulnerable to information disclosure. The vulnerability exists in multiple functions of backup.php, allowing an attacker to obtain database information or read server files by injecting and executing malicious SQL queries.

References

github.com/advisories/GHSA-236j-rfx5-wq38

github.com/opencart/opencart/blob/4.0.1.1/upload/admin/controller/tool/backup.php#L257

medium.com/%40nowczj/sql-injection-exists-in-the-background-of-opencart-d41b5c58e99e

medium.com/@nowczj/sql-injection-exists-in-the-background-of-opencart-d41b5c58e99e

EPSS

0.001

Percentile

32.8%

JSON

Related for VERACODE:37809