| शीर्षक | ShipRocket OpenCart module v3 and v4 SQL Injection |
|---|
| विवरण | The ShipRocket OpenCart Rest API module has multiple SQL Injection (SQLi) vulnerabilities.
The most serious of these allows an unauthenticated attacker to access any and all content stored in the database.
Via the SQLi vulnerability it's possible to compromise the site by exfiltrating admin session details / credentials.
Any Personally Identifiable Information (PII) and/or payment details stored in the site's database would also be vulnerable to exfiltration. |
|---|
| स्रोत | ⚠️ https://gist.github.com/mcdruid/3c9fc9bd4e882cee21f8a37998f56fce |
|---|
| उपयोगकर्ता | mcdruid (UID 79710) |
|---|
| सबमिशन | 07/01/2025 11:46 PM (2 साल पहले) |
|---|
| संयम | 19/01/2025 08:54 PM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 292597 [Shiprocket Module 3/4 पर OpenCart REST API restapi x-username SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|