| عنوان | Dreamvention Live Ajax Search OpenCart module <= 1.0.6 SQL Injection |
|---|
| الوصف | The Dreamvention Live Ajax Search OpenCart module has a SQL Injection (SQLi) vulnerability.
This allows an unauthenticated attacker to access any and all content stored in the database.
Via the SQLi vulnerability it's possible to compromise the site by exfiltrating admin session details / credentials.
Any Personally Identifiable Information (PII) and/or payment details stored in the site's database would also be vulnerable to exfiltration. |
|---|
| المصدر | ⚠️ https://gist.github.com/mcdruid/d6a41cfebd9e10e63a8c698d3a8ad771 |
|---|
| المستخدم | mcdruid (UID 79710) |
|---|
| ارسال | 30/01/2025 04:19 PM (2 سنوات منذ) |
|---|
| الاعتدال | 07/02/2025 05:35 PM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 295022 [Dreamvention Live AJAX Search Free حتى 1.0.6 على OpenCart live_search.searchresults searchresults/search keyword حقن SQL] |
|---|
| النقاط | 20 |
|---|