CVE-2021-37823

Description

OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background.

Affected packages (1)

• Packagist/opencart/opencartfrom 0, <= 3.0.3.7

CVSS scores

References (3)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-37823
• PATCHhttps://github.com/opencart/opencart
• WEBhttps://medium.com/@nowczj/sql-injection-exists-in-the-background-of-opencart-d41b5c58e99e