CVE-2017-20282

Name of the Vulnerable Software and Affected Versions Joomla! Component jCart for OpenCart version 2.0

Description An SQL injection allows unauthenticated attackers to manipulate database queries by injecting SQL code. This is achieved by sending GET requests to the 'index.php' endpoint using the option=com jcart&route=product/product parameters and providing malicious values in the product id variable to extract sensitive database information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.