2026-03-25 16:04:35
VulnCheck
PUBLISHED
OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the search parameter. Attackers can send GET requests to the product search endpoint with malicious search values to extract sensitive database information using boolean-based blind or time-based blind SQL injection techniques.