CVE-2024-58341

Deeper analysis

OpenCart Core version 4.0.2.3 is affected by CVE-2024-58341, a SQL injection vulnerability (CWE-89) in the product search endpoint. The flaw arises from insufficient sanitization of the 'search' parameter in GET requests, enabling attackers to inject malicious SQL code into database queries. This allows extraction of sensitive database information through boolean-based blind or time-based blind SQL injection techniques. The vulnerability has a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N), indicating high severity due to its network accessibility and lack of prerequisites.

Unauthenticated attackers can exploit this vulnerability remotely by crafting GET requests to the product search endpoint with specially manipulated 'search' values. Successful exploitation enables data exfiltration, such as dumping user credentials, orders, or other confidential information from the database, without requiring privileges, user interaction, or impacting availability. The low attack complexity makes it accessible to attackers with basic SQL injection knowledge.

Mitigation details are available in vendor advisories and related resources, including the OpenCart GitHub releases page for patches, the official OpenCart website, a Vulncheck advisory on the search parameter SQL injection, and an Exploit-DB entry with a proof-of-concept (exploit ID 51940). Security practitioners should apply the latest updates from these sources to remediate the issue.