Vulnerabilities

OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-price orders by clearing reward points after selecting Free Checkout.

OpenCart extensions are uploaded as zip files with .ocmod.zip extensions.

OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint.

OpenCart 3.0.3.6 contains a cross-site request forgery vulnerability in the /account/edit endpoint that allows unauthenticated attackers to modify victim account details by tricking users into visiting malicious pages.

OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting arbitrary values into the OCSESSID cookie.

OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'search' parameter.

A vulnerability has been found in OpenCart 4.0.2.3.

A security flaw has been discovered in OpenCart up to 4.1.0.3.

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via SVG file uploads used in blog posts.

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor.

HTML injection vulnerabilities in OpenCart versions prior to 4.1.0.

HTML injection vulnerabilities in OpenCart versions prior to 4.1.0.

HTML injection vulnerabilities in OpenCart versions prior to 4.1.0.

Cross-Site Scripting vulnerability in OpenCart versions prior to 4.1.0.

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.

This affects versions of the package opencart/opencart from 4.0.0.0 and before 4.1.0.0.

This affects versions of the package opencart/opencart from 4.0.0.0.

This affects versions of the package opencart/opencart from 0.0.0.

This affects versions of the package opencart/opencart from 4.0.0.0.

This affects versions of the package opencart/opencart from 4.0.0.0.

This affects versions of the package opencart/opencart from 4.0.0.0.

An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote…

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server

OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the…

SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via the Fba plugin function in upload/admin/index.php.