Vulnerabilities (CVE)

Filtered by vendor Opencart Subscribe
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-3763 1 Opencart 1 Opencart 2017-08-29 5.0 MEDIUM N/A
OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/startup.php and certain other files.
CVE-2015-4671 1 Opencart 1 Opencart 2016-12-07 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zone_id parameter to index.php.
CVE-2010-0956 1 Opencart 1 Opencart 2010-06-23 7.5 HIGH N/A
SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter.