Veille CVE

Recherche « Soft-Php jCart for OpenCart »

1 CVE

  1. CVE-2017-20282 8.2 Élevée

    Soft-Php jCart for OpenCart

    Joomla! Component jCart for OpenCart 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the product_id parameter. Attackers can send GET requests to index.php with the option=com_jcart&route=product/product parameters and malicious product_id values to extract sensitive database information.