CVE-2025-1117

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-1117

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1117.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-1117

Published

2025-02-08T12:31:05.625Z

Modified

2026-07-08T06:56:15.653606904Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

CoinRemitter sql injection

Details

A vulnerability, which was classified as critical, was found in CoinRemitter 0.0.1/0.0.2 on OpenCart. This affects an unknown part. The manipulation of the argument coin leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.3 is able to address this issue. It is recommended to upgrade the affected component.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1117.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-74",
        "CWE-89"
    ]
}

References

Affected packages

Git / github.com/coinremitter/opencart

Affected ranges

Type

GIT

Repo

https://github.com/coinremitter/opencart

Events

Introduced

2d70be62904fd7e6093f959f263e9dbf16a9b2d3

Fixed

9d67ec5217cddbaf861fded1a6286f1fe0d63cea

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0.0.1"
        },
        {
            "last_affected": "0.0.1"
        },
        {
            "introduced": "0.0.2"
        },
        {
            "last_affected": "0.0.2"
        }
    ]
}

Affected versions

0.*

0.0.1

0.0.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1117.json"