CVE-2024-58341

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-58341

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-58341.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-58341

Published

2026-03-25T16:04:35.565Z

Modified

2026-07-08T07:12:25.317744195Z

Severity

8.8 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

OpenCart Core 4.0.2.3 SQL Injection via search Parameter

Details

OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'search' parameter. Attackers can send GET requests to the product search endpoint with malicious 'search' values to extract sensitive database information using boolean-based blind or time-based blind SQL injection techniques.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58341.json",
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-89"
    ]
}

References

Affected packages

Git / github.com/opencart/opencart

Affected ranges

Type

GIT

Repo

https://github.com/opencart/opencart

Events

Introduced

139d890ee24bdafeb055534c2f0de923e4250e83

Last affected

139d890ee24bdafeb055534c2f0de923e4250e83

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ],
    "cpe": "cpe:2.3:a:opencart:opencart:4.0.2.3:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.2.3"
        },
        {
            "last_affected": "4.0.2.3"
        }
    ]
}

Affected versions

4.*

4.0.2.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-58341.json"