Back to Codebase

Vulnerability Analysis Report

OpenCart Core v1.5.6.4

Scan ID: SCAN-OPENCART-CORE-pBh93M • Hash: 9232fe81

Severity Score
High
Total Findings
5
Engine Version
ECOMGUARD-HYBRID-AST-1.5
Scan Duration
0.449s

Vulnerability Details

L629

Potential SQL Injection in openbay.php

CWE-89
File Location: upload/admin/controller/openbay/openbay.php:629
Security Score:
94 / 100
Confirmed Issue

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- $this->db->query("TRUNCATE `" . DB_PREFIX . "attribute_description`");
+ $this->db->query("SELECT ... WHERE field = '" . $this->db->escape($variable) . "'");
L618

Potential SQL Injection in openbay.php

CWE-89
File Location: upload/admin/controller/openbay/openbay.php:618
Security Score:
93 / 100
Confirmed Issue

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- $this->db->query("TRUNCATE `" . DB_PREFIX . "order_option`");
+ $this->db->query("SELECT ... WHERE field = '" . $this->db->escape($variable) . "'");
L620

Potential SQL Injection in openbay.php

CWE-89
File Location: upload/admin/controller/openbay/openbay.php:620
Security Score:
93 / 100
Confirmed Issue

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- $this->db->query("TRUNCATE `" . DB_PREFIX . "order_total`");
+ $this->db->query("SELECT ... WHERE field = '" . $this->db->escape($variable) . "'");
L621

Potential SQL Injection in openbay.php

CWE-89
File Location: upload/admin/controller/openbay/openbay.php:621
Security Score:
93 / 100
Confirmed Issue

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- $this->db->query("TRUNCATE `" . DB_PREFIX . "customer`");
+ $this->db->query("SELECT ... WHERE field = '" . $this->db->escape($variable) . "'");
L623

Potential SQL Injection in openbay.php

CWE-89
File Location: upload/admin/controller/openbay/openbay.php:623
Security Score:
93 / 100
Confirmed Issue

Rule Engine Warning

Detected insecure pattern matching known vulnerability signatures. High Severity (Confirmed via full AST flow control tracing). Please apply remediation steps matching the recommended patch format below.

Heuristics Diff
- $this->db->query("TRUNCATE `" . DB_PREFIX . "address`");
+ $this->db->query("SELECT ... WHERE field = '" . $this->db->escape($variable) . "'");