oss-security - CVE request: OpenCart 2.1.0.2 to 2.2.0.0 - json

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <68AD5BF8-0B12-4F1E-8DE0-49E36A769AC3@gmail.com>
Date: Thu, 14 Apr 2016 13:26:49 -0400
From: Naser Farhadi <n4ser.farhadi@...il.com>
To: oss-security@...ts.openwall.com
Subject: CVE request: OpenCart 2.1.0.2 to 2.2.0.0 - json_decode Function Remote Code Execution

Hi

OpenCart is prone to an remote code-execution vulnerability.

https://www.exploit-db.com/exploits/39679/ <https://www.exploit-db.com/exploits/39679/>
http://seclists.org/bugtraq/2016/Apr/61 <http://seclists.org/bugtraq/2016/Apr/61>
https://github.com/opencart/opencart/issues/4220 <https://github.com/opencart/opencart/issues/4220>

Could a CVE please be assigned to this issue?

Regards,
Naser

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.