← All advisories

Medium severity4.9NVD Advisory· Published Nov 3, 2022· Updated Jun 17, 2026

CVE-2021-37823

CVE-2021-37823

Description

OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
opencart/opencartPackagist	<= 3.0.3.7	—

Affected products

3

Opencart/Opencart2 versions
cpe:2.3:a:opencart:opencart:3.0.3.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:opencart:opencart:3.0.3.7:*:*:*:*:*:*:*
- (no CPE)
ghsa-coords
pkg:composer/opencart/opencart
Range: <= 3.0.3.7

Patches

Vulnerability mechanics

References

4

medium.com/%40nowczj/sql-injection-exists-in-the-background-of-opencart-d41b5c58e99envdExploitThird Party Advisory
github.com/advisories/GHSA-236j-rfx5-wq38ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-37823ghsaADVISORY
medium.com/@nowczj/sql-injection-exists-in-the-background-of-opencart-d41b5c58e99eghsaWEB

News mentions

0

No linked articles in our index yet.