İçeriğe atla
Noroxi

Opencart kayıtları

opencart üreticisine ait 39 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%5,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

39 kayıt
  • CVE-2014-3990
    41Planlayın

    The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side reque

    KritikCVSS 9,8İstismar yokEPSS %6

    opencart · opencart20 Mar 2018

  • CVE-2023-40834
    39İzleyin

    OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthentic

    KritikCVSS 9,8İstismar yokEPSS %1

    opencart · opencart12 Eyl 2023

  • CVE-2024-21514
    38İzleyin

    This affects versions of the package opencart/opencart from 0.0.0.

    YüksekCVSS 8,1Kavram kanıtıEPSS %19

    opencart · opencart22 Haz 2024

  • CVE-2023-47444
    36İzleyin

    An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbit

    YüksekCVSS 8,8İstismar yokEPSS %1

    opencart · opencart15 Kas 2023

  • CVE-2023-2315
    35İzleyin

    Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2

    YüksekCVSS 8,8İstismar yokEPSS %1

    opencart · opencart27 Eyl 2023

  • CVE-2018-13067
    35İzleyin

    /upload/catalog/controller/account/password.php in OpenCart through 3.0.2.0 has CSRF via the index.php?route=account/password URI to change

    YüksekCVSS 8,8İstismar yokEPSS %0

    opencart · opencart2 Tem 2018

  • CVE-2024-58341
    35İzleyin

    OpenCart Core 4.0.2.3 SQL Injection via search Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    opencart · opencart25 Mar 2026

  • CVE-2018-11494
    33İzleyin

    The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that a

    YüksekCVSS 8,0İstismar yokEPSS %2

    opencart · opencart26 May 2018

  • CVE-2024-21518
    32İzleyin

    This affects versions of the package opencart/opencart from 4.0.0.0.

    YüksekCVSS 7,2İstismar yokEPSS %14

    opencart · opencart22 Haz 2024

  • CVE-2009-1027
    31İzleyin

    SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter.

    YüksekCVSS 7,5İstismar yokEPSS %1

    opencart · opencart19 Mar 2009

  • CVE-2010-0956
    30İzleyin

    SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.

    YüksekCVSS 7,5İstismar yokEPSS %1

    opencart · opencart10 Mar 2010

  • CVE-2013-1891
    28İzleyin

    In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.

    OrtaCVSS 6,5Kavram kanıtıEPSS %6

    opencart · opencart24 Haz 2022

  • CVE-2016-10509
    28İzleyin

    SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.

    YüksekCVSS 7,2İstismar yokEPSS %1

    opencart · opencart31 Ağu 2017

  • CVE-2020-20491
    28İzleyin

    SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via the Fba plugin function

    YüksekCVSS 7,2İstismar yokEPSS %1

    opencart · opencart20 Haz 2023

  • CVE-2024-36694
    28İzleyin

    OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.

    YüksekCVSS 7,2İstismar yokEPSS %0

    opencart · opencart18 Ara 2024

  • CVE-2024-21519
    28İzleyin

    This affects versions of the package opencart/opencart from 4.0.0.0.

    YüksekCVSS 7,2İstismar yokEPSS %0

    opencart · opencart22 Haz 2024

  • CVE-2010-1610
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in index.php in OpenCart 1.4 allows remote attackers to hijack the authentication of an appl

    OrtaCVSS 6,8İstismar yokEPSS %0

    opencart · opencart29 Nis 2010

  • CVE-2015-4671
    24İzleyin

    Cross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the z

    OrtaCVSS 6,1İstismar yokEPSS %1

    opencart · opencart12 Oca 2016

  • CVE-2025-45893
    24İzleyin

    OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via SVG file uploads used in blog posts.

    OrtaCVSS 6,1İstismar yokEPSS %0

    opencart · opencart25 Tem 2025

  • CVE-2025-45892
    24İzleyin

    OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor.

    OrtaCVSS 6,1İstismar yokEPSS %0

    opencart · opencart25 Tem 2025

  • CVE-2025-1746
    24İzleyin

    Cross-Site Scripting vulnerability in OpenCart

    OrtaCVSS 6,1İstismar yokEPSS %0

    opencart · opencart28 Şub 2025

  • CVE-2009-1621
    22İzleyin

    Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %6

    opencart · opencart12 May 2009

  • CVE-2020-10596
    22İzleyin

    OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.

    OrtaCVSS 5,4Kavram kanıtıEPSS %2

    opencart · opencart17 Mar 2020

  • CVE-2019-15081
    20İzleyin

    OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing feature of the Categor

    OrtaCVSS 4,8Kavram kanıtıEPSS %1

    opencart · opencart15 Ağu 2019

  • CVE-2020-29470
    20İzleyin

    OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Subject field of mail.

    OrtaCVSS 4,8Kavram kanıtıEPSS %1

    opencart · opencart29 Ara 2020