Back to Codebase

Vulnerability Analysis Report

OpenCart Core v1.5.6.1

Scan ID: SCAN-OPENCART-CORE-ZtgjEU • Hash: 168908dd

Severity Score
High
Total Findings
5
Engine Version
ECOMGUARD-HYBRID-AST-1.5
Scan Duration
0.457s

Vulnerability Details

L542

Potential SQL Injection in openbay.php

CWE-89
File Location: upload/admin/controller/openbay/openbay.php:542
Security Score:
94 / 100
Confirmed Issue

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- $this->db->query("TRUNCATE `" . DB_PREFIX . "order_product`");
+ $this->db->query("SELECT ... WHERE field = '" . $this->db->escape($variable) . "'");
L553

Potential SQL Injection in openbay.php

CWE-89
File Location: upload/admin/controller/openbay/openbay.php:553
Security Score:
94 / 100
Confirmed Issue

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- $this->db->query("TRUNCATE `" . DB_PREFIX . "attribute_group`");
+ $this->db->query("SELECT ... WHERE field = '" . $this->db->escape($variable) . "'");
L554

Potential SQL Injection in openbay.php

CWE-89
File Location: upload/admin/controller/openbay/openbay.php:554
Security Score:
94 / 100
Confirmed Issue

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- $this->db->query("TRUNCATE `" . DB_PREFIX . "attribute_group_description`");
+ $this->db->query("SELECT ... WHERE field = '" . $this->db->escape($variable) . "'");
L555

Potential SQL Injection in openbay.php

CWE-89
File Location: upload/admin/controller/openbay/openbay.php:555
Security Score:
94 / 100
Confirmed Issue

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- $this->db->query("TRUNCATE `" . DB_PREFIX . "ebay_listing`");
+ $this->db->query("SELECT ... WHERE field = '" . $this->db->escape($variable) . "'");
L539

Potential SQL Injection in openbay.php

CWE-89
File Location: upload/admin/controller/openbay/openbay.php:539
Security Score:
93 / 100
Confirmed Issue

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- $this->db->query("TRUNCATE `" . DB_PREFIX . "order`");
+ $this->db->query("SELECT ... WHERE field = '" . $this->db->escape($variable) . "'");