Skip to content
OpenAdvisories

Vendor

OpenCart

11 known vulnerabilities.

Products

OpenCart 10 OpenCart Core 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2024-58341

    OpenCart Core 4.0.2.3 SQL Injection via search Parameter

    OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'search' parameter. Attackers can send GET requests to the product search endpoint with malicio…

    OpenCart OpenCart Core
  • High 8.1
    CVE-2023-2315

    Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2

    Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server

    OpenCart OpenCart opencart/opencart Packagist