https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:01:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-318265 EUVD-2026-318265 https://cve.radiocsirt.org/vuln/euvd-2026-318265 https://cve.radiocsirt.org/vuln/fkie_cve-2024-58341 <p>OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the &#39;search&#39; parameter. Attackers can send GET requests to the product search endpoint with malicious &#39;search&#39; values to extract sensitive database information using boolean-based blind or time-based blind SQL injection techniques.</p> <p>OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the &#39;search&#39; parameter. Attackers can send GET requests to the product search endpoint with malicious &#39;search&#39; values to extract sensitive database information using boolean-based blind or time-based blind SQL injection techniques.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-58341 https://cve.radiocsirt.org/vuln/ghsa-rchp-2wh9-pwpw <p>OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the &#39;search&#39; parameter. Attackers can send GET requests to the product search endpoint with malicious &#39;search&#39; values to extract sensitive database information using boolean-based blind or time-based blind SQL injection techniques.</p> <p>OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the &#39;search&#39; parameter. Attackers can send GET requests to the product search endpoint with malicious &#39;search&#39; values to extract sensitive database information using boolean-based blind or time-based blind SQL injection techniques.</p> https://cve.radiocsirt.org/vuln/ghsa-rchp-2wh9-pwpw