JOIN TELEGRAM CHANNEL
OpenCart Exploits
DATABASE
OpenCart Core 4.0.2.3 – ‘search’ SQLi
php VIEW
OpenCart v3.x Newsletter Module – Blind SQLi
php VIEW
opencart 3.0.3.8 – Sessjion Injection
php VIEW
Opencart 3 Extension TMD Vendor System – Blind SQL Injection
php VIEW
OpenCart 3.0.3.7 – ‘Change Password’ Cross-Site Request Forgery (CSRF)
php VIEW
OpenCart 3.0.36 – ATO via Cross Site Request Forgery
php VIEW
OpenCart 3.0.3.6 – Cross Site Request Forgery
php VIEW
OpenCart 3.0.3.6 – ‘Profile Image’ Stored Cross-Site Scripting (Authenticated)
CVE-2020-29471 php VIEW
OpenCart 3.0.3.6 – ‘subject’ Stored Cross-Site Scripting
CVE-2020-29470 php VIEW
OpenCart Theme Journal 3.1.0 – Sensitive Data Exposure
CVE-2020-15478 php VIEW
OpenCart 3.0.3.2 – Stored Cross Site Scripting (Authenticated)
CVE-2020-10596 php VIEW
Opencart 3.x – Cross-Site Scripting
CVE-2019-15081 php VIEW
Opencart 3.0.3.2 – ‘extension/feed/google_base’ Denial of Service (PoC)
php VIEW
Joomla! Component jCart for OpenCart 2.3.0.2 – Cross-Site Request Forgery
php VIEW
Joomla! Component jCart for OpenCart 2.0 – ‘product_id’ SQL Injection
php VIEW
OpenCart 2.1.0.2 < 2.2.0.0 - json_decode Function Remote Code Execution
php VIEW
OpenCart 1.5.6.1 – ‘openbay’ Multiple SQL Injections
OSVDB-104980 php VIEW
OpenCart – Cross-Site Request Forgery (Change User Password)
OSVDB-92311 php VIEW
OpenCart 1.5.5.1 – ‘FileManager.php’ Directory Traversal Arbitrary File Access
OSVDB-91500;CVE-2013-1891 php VIEW
opencart 1.5.2.1 – Multiple Vulnerabilities
OSVDB-81243;OSVDB-81242;OSVDB-81241;OSVDB-81240;OSVDB-81239;OSVDB-81238 php VIEW
OpenCart 1.5.1.2 – Blind SQL Injection
OSVDB-86068 php VIEW
OpenCart 1.4.9 – Multiple Local File Inclusions
php VIEW
Opencart 1.4.9.1 – Arbitrary File Upload
php VIEW
OpenCart 1.3.2 – ‘page’ SQL Injection
php VIEW
Opencart 1.1.8 – ‘route’ Local File Inclusion
OSVDB-54424;CVE-2009-1621 php VIEW