Description

OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background.

Remediation

References

CVE-2021-37823

Related Vulnerabilities

WordPress Plugin Login by Auth0 Multiple Vulnerabilities (3.11.3)

WordPress Plugin All in One Webmaster Unspecified Vulnerability (11.0)

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4319)

TYPO3 Cryptographic Issues Vulnerability (CVE-2013-7075)

Coppermine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1613)

Severity

Medium

Classification

CVE-2021-37823 CWE-138 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities