Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the product_id parameter. Attackers can craft malicious SQL queries using time-based or content-based blind injection techniques to enumerate usernames, emails, and password reset codes from the oc_user table.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
🚨 CVE-2021-47928: Opencart TMD Vendor System 3.x blind SQL injection. Unauthenticated attackers extract database contents via product_id parameter. Time-based enumeration targets oc_user table. Patch immediately. https://0x2ed3bb60.xyz/threat/9df35e7c2a5a9f2a
Post summary
The post warns of a blind SQL injection flaw in Opencart TMD Vendor System 3.x and urges immediate patching.
CVE-2021-47928 Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL cod… https://www.cve.org/CVERecord?id=CVE-2021-47928
Post summary
The text reports a blind SQL injection flaw in Opencart TMD Vendor System 3.x that permits unauthenticated DB data extraction.