Critical severity9.8NVD Advisory· Published May 17, 2022· Updated Jun 17, 2026

CVE-2022-24108

Description

The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause DoS, and achieve remote code execution because of deserialization of untrusted data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Skyoftech/So Listing Tabs moduledescription
Opencart/So Listing Tabsllm-create
Range: =2.2.0
Skyoftech/So Listing Tabsllm-fuzzy
Range: =2.2.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/167197/OpenCart-So-Listing-Tabs-2.2.0-Unsafe-Deserialization.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2022/May/30nvdExploitMailing ListThird Party Advisory
codecanyon.net/item/so-listing-tabs-responsive-opencart-module/12388133nvdProductThird Party Advisory
www.smartaddons.com/opencart-extensions/so-listing-tabs-responsive-opencart-30x-opencart-2x-modulenvdProductThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.026
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000