openCart Server-Side Template Injection (SSTI) vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-36694 · ADVISORY
• opencart/opencart · WEB
• A3h1nt/CVEs · WEB
• opencart/opencart · PACKAGE
• opencart/opencart release 4.0.2.3 · WEB
• medium.com/@pawarit.sanguanpang/opencart-v4-0-2-3-server-side-template-injection-0b173a3bdcf9 · WEB
• PawaritSanguanpang/CVEs · Exploit

Weitere Schwachstellen in opencart/opencart

• CVE-2024-21519HOCH 7.2This affects versions of the package opencart/opencart from 4.0.0.0. An Arbitrary File Creation issue was identified via the database restor…
• CVE-2024-21518HOCH 7.2This affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace installer due to im…
• CVE-2024-21517MITTEL 6.1This affects versions of the package opencart/opencart from 4.0.0.0. A reflected XSS issue was identified in the redirect parameter of custo…
• CVE-2024-21516MITTEL 4.7This affects versions of the package opencart/opencart from 4.0.0.0 and before 4.1.0.0. A reflected XSS issue was identified in the director…
• CVE-2024-21515MITTEL 4.7This affects versions of the package opencart/opencart from 4.0.0.0. A reflected XSS issue was identified in the filename parameter of the a…