High · 7.2 CVE-2020-20491 EUVD-2020-13278GHSA-h9xp-w8f3-2qrr

SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via the Fba plugin functio…

Published Jun 20, 2023 · Updated Dec 10, 2024 · Assigned by mitre

Description

SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via the Fba plugin function in upload/admin/index.php.

References

https://github.com/opencart/opencart/issues/7612