| Название | Dreamvention Live Ajax Search OpenCart module <= 1.0.6 SQL Injection |
|---|
| Описание | The Dreamvention Live Ajax Search OpenCart module has a SQL Injection (SQLi) vulnerability.
This allows an unauthenticated attacker to access any and all content stored in the database.
Via the SQLi vulnerability it's possible to compromise the site by exfiltrating admin session details / credentials.
Any Personally Identifiable Information (PII) and/or payment details stored in the site's database would also be vulnerable to exfiltration. |
|---|
| Источник | ⚠️ https://gist.github.com/mcdruid/d6a41cfebd9e10e63a8c698d3a8ad771 |
|---|
| Пользователь | mcdruid (UID 79710) |
|---|
| Представление | 30.01.2025 16:19 (2 лет назад) |
|---|
| Модерация | 07.02.2025 17:35 (8 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 295022 [Dreamvention Live AJAX Search Free до 1.0.6 на OpenCart live_search.searchresults searchresults/search keyword SQL-инъекция] |
|---|
| Баллы | 20 |
|---|