CVE-2015-4671

Description

References

• packetstormsecurity.com/files/135163/OpenCart-2.1.0.1-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2016/Jan/17
• opencart/opencart commit 303fa88
• opencart/opencart release 2.1.0.2 · Patch

Altre vulnerabilità di opencart

• CVE-2024-58341ALTO 8.2OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecti…
• CVE-2026-3714MEDIO 4.7A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template…
• CVE-2025-15116MEDIO 4.8A security flaw has been discovered in OpenCart up to 4.1.0.3. Affected by this issue is some unknown functionality of the component Single-…
• CVE-2025-45893MEDIO 6.1OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via SVG file uploads used in blog posts. The vulnerabil…
• CVE-2025-45892MEDIO 6.1OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor. The vulnerability arises because i…