Opencart/opencart vulnerabilities
We track 3 vulnerabilities in Opencart/opencart products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 22, 2024.
Latest Opencart/opencart vulnerabilities
- 7.2 High severity
This affects versions of the package opencart/opencart from 4.0.0.0.
This affects versions of the package opencart/opencart from 4.0.0.0. An Arbitrary File Creation issue was identified via the database restoration functionality. By injecting PHP code into the database, an attacker with admin privileges can create a backup file
- 7.2 High severity
opencart/opencart: Improper Limitation of a Pathname to a Restricted Directory
This affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace installer due to improper sanitization of the target path, allowing files within a malicious archive to traverse the filesystem and be extr
- 8.1 High severity
opencart/opencart: Improper Neutralization of Special Elements used in an SQL Command
This affects versions of the package opencart/opencart from 0.0.0. An SQL Injection issue was identified in the Divido payment extension for OpenCart, which is included by default in version 3.0.3.9. As an anonymous unauthenticated user, if the Divido payment