OpenCart SQL injection vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-37823 · ADVISORY
• opencart/opencart · PACKAGE
• medium.com/@nowczj/sql-injection-exists-in-the-background-of-opencart-d41b5c58e99e · WEB
• medium.com/%40nowczj/sql-injection-exists-in-the-background-of-opencart-d41b5c58e99e · Exploit

opencart/opencart のその他の脆弱性

• CVE-2024-36694高 7.2OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.
• CVE-2024-21519高 7.2This affects versions of the package opencart/opencart from 4.0.0.0. An Arbitrary File Creation issue was identified via the database restor…
• CVE-2024-21518高 7.2This affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace installer due to im…
• CVE-2024-21517中 6.1This affects versions of the package opencart/opencart from 4.0.0.0. A reflected XSS issue was identified in the redirect parameter of custo…
• CVE-2024-21516中 4.7This affects versions of the package opencart/opencart from 4.0.0.0 and before 4.1.0.0. A reflected XSS issue was identified in the director…