CVE-2014-3990

概要

参考情報

• karmainsecurity.com/KIS-2014-08 · Exploit
• packetstormsecurity.com/files/127460/OpenCart-1.5.6.4-PHP-Object-Injection.html · Exploit
• seclists.org/fulldisclosure/2014/Jul/67 · Exploit
• securityfocus.com/archive/1/532763/100/0/threaded · Exploit
• securityfocus.com/bid/68529 · Third Party Advisory
• opencart-ce/opencart-ce commit c2aafc8 · Issue Tracking

opencart のその他の脆弱性

• CVE-2024-58341高 8.2OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecti…
• CVE-2026-3714中 4.7A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template…
• CVE-2025-15116中 4.8A security flaw has been discovered in OpenCart up to 4.1.0.3. Affected by this issue is some unknown functionality of the component Single-…
• CVE-2025-45893中 6.1OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via SVG file uploads used in blog posts. The vulnerabil…
• CVE-2025-45892中 6.1OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor. The vulnerability arises because i…