~ / search / GHSA-236j-rfx5-wq38

GHSA-236j-rfx5-wq38

OpenCart SQL injection vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-37823

Packages

EcosystemPackageAffectedFixed in
Packagist opencart/opencart <= 3.0.3.7 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background.

References

External links from the advisory. They lead to third-party sites.