ID de Prueba:	1.3.6.1.4.1.25623.1.0.801227
Categoría:	Web application abuses
Título:	OpenCart < 1.4.8 CSRF Vulnerability
Resumen:	OpenCart is prone to a cross-site request forgery (CSRF); vulnerability.
Descripción:	Summary: OpenCart is prone to a cross-site request forgery (CSRF) vulnerability. Vulnerability Insight: The flaw is caused by improper validation of user-supplied input in index.php, that allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to 'user/user/insert'. Vulnerability Impact: Successful exploitation will allow attackers to perform CSRF attacks, which will aid in further attacks. Affected Software/OS: OpenCart version 1.4.7 and prior. Solution: Update to version 1.4.8 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1610 Bugtraq: 20100202 OpenCart CSRF Vulnerability (Google Search) http://www.securityfocus.com/archive/1/509313/100/0/threaded http://blog.visionsource.org/2010/01/28/opencart-csrf-vulnerability/ http://secunia.com/advisories/38419 XForce ISS Database: opencart-admin-csrf(56061) https://exchange.xforce.ibmcloud.com/vulnerabilities/56061
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.