PT-2020-14445 · Opencart · Opencart Journal Theme

Jinson Varghese Behanan · Published 2020-07-01 · Updated 2021-07-21 · CVE-2020-15478

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenCart Journal theme versions prior to 3.1.0

Description The issue allows exposure of sensitive data via SQL errors.

Recommendations For versions prior to 3.1.0, update to version 3.1.0 or later to resolve the issue.

Exploit

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2020-15478

Affected Products

Opencart Journal Theme

References · 6

• 🔥 https://exploit-db.com/exploits/49044 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-15478 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15478 · Vendor Advisory
• https://docs.journal-theme.com/changelog · Note
• https://jinsonvarghese.com/sensitive-data-exposure-in-journal-theme · Note
• https://getastra.com/blog/911/plugin-exploit/sql-errors-data-exposure-in-journal-opencart-theme · Note