| शीर्षक | CoinRemitter CoinRemitter Plugin For Opencart 0.0.2 / version 4.0 SQL Injection |
|---|
| विवरण | The CoinRemitter Plugin For Opencart has multiple SQL Injection (SQLi) vulnerabilities.
The most serious of these allows an unauthenticated attacker to access any and all content stored in the database.
It's also possible to retrieve the API credentials for a coinremitter wallet, including the unencrypted password, due to the fact that encryption details are hard-coded and publicly available. This could potentially result in theft from the wallet.
Via the SQLi vulnerability it's possible to compromise the site by exfiltrating admin session details / credentials.
Any Personally Identifiable Information (PII) and/or payment details stored in the site's database would also be vulnerable to exfiltration. |
|---|
| स्रोत | ⚠️ https://gist.github.com/mcdruid/d4bdd8ffb8988bce9408c6bac40a15c5 |
|---|
| उपयोगकर्ता | mcdruid (UID 79710) |
|---|
| सबमिशन | 31/01/2025 10:09 AM (2 साल पहले) |
|---|
| संयम | 07/02/2025 05:39 PM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 295023 [CoinRemitter 0.0.1/0.0.2 पर OpenCart coin SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|