Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
opencart opencart vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2023-47444
An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on the underlying server.
Opencart Opencart
2 Github repositories
1 Article
NA
CVE-2009-1621
Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote malicious users to read arbitrary files via a .. (dot dot) in the route parameter.
Opencart Opencart 1.1.8
1 EDB exploit
4.8
CVSSv3
CVE-2020-29471
OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger.
Opencart Opencart 3.0.3.6
4.8
CVSSv3
CVE-2020-29470
OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Subject field of mail. This vulnerability can allow an malicious user to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS triggers and the a...
Opencart Opencart 3.0.3.6
NA
CVE-2011-3763
OpenCart 1.4.9.3 allows remote malicious users to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/startup.php and certain other files.
Opencart Opencart 1.4.9.3
NA
CVE-2010-0956
SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote malicious users to execute arbitrary SQL commands via the page parameter.
Opencart Opencart 1.3.2
4.9
CVSSv3
CVE-2021-37823
OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background.
Opencart Opencart 3.0.3.7
NA
CVE-2009-1027
SQL injection vulnerability in OpenCart 1.1.8 allows remote malicious users to execute arbitrary SQL commands via the order parameter.
Opencart Opencart 1.1.8
NA
CVE-2010-1610
Cross-site request forgery (CSRF) vulnerability in index.php in OpenCart 1.4 allows remote malicious users to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to "user...
Opencart Opencart 1.4
3.5
CVSSv3
CVE-2020-28838
Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows malicious user to add cart items via Add to cart.
Opencart Opencart 3.0.3.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692
malicious code
XML injection
CVE-2024-28020
CVE-2024-35252
CVE-2024-5833
CVE-2024-30066
injection
CVE-2024-23282
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »