CPE Details
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:opencart:opencart:3.0.3.7:*:*:*:*:*:*:*
Informations
Vendor
opencartProduct
opencartVersion
3.0.3.7Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/voucher. | 4.7 |
Medium |
||
| HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/register. | 4.7 |
Medium |
||
| HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/login. | 4.7 |
Medium |
||
| Cross-Site Scripting vulnerability in OpenCart versions prior to 4.1.0. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the search in the /product/search endpoint. This vulnerability could be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. | 6.1 |
Medium |
||
| OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background. | 4.9 |
Medium |
