SQL Injection Affecting opencart/opencart package, versions >=0.0.0
Threat Intelligence
Exploit Maturity
Proof of concept
EPSS
0.19% (58th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-OPENCARTOPENCART-3043118
- published 13 Oct 2022
- disclosed 13 Oct 2022
- credit Unknown
Introduced: 13 Oct 2022
CVE-2022-41403 Open this link in a new tabHow to fix?
There is no fixed version for opencart/opencart.
Overview
opencart/opencart is a shopping cart system
Affected versions of this package are vulnerable to SQL Injection via the email parameter at index.php?route=extension/module/so_newletter_custom_popup/newsletter.
References
CVSS Scores
version 3.1