Test ID:	1.3.6.1.4.1.25623.1.0.801227
Category:	Web application abuses
Title:	OpenCart < 1.4.8 CSRF Vulnerability
Summary:	OpenCart is prone to a cross-site request forgery (CSRF); vulnerability.
Description:	Summary: OpenCart is prone to a cross-site request forgery (CSRF) vulnerability. Vulnerability Insight: The flaw is caused by improper validation of user-supplied input in index.php, that allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to 'user/user/insert'. Vulnerability Impact: Successful exploitation will allow attackers to perform CSRF attacks, which will aid in further attacks. Affected Software/OS: OpenCart version 1.4.7 and prior. Solution: Update to version 1.4.8 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1610 Bugtraq: 20100202 OpenCart CSRF Vulnerability (Google Search) http://www.securityfocus.com/archive/1/509313/100/0/threaded http://blog.visionsource.org/2010/01/28/opencart-csrf-vulnerability/ http://secunia.com/advisories/38419 XForce ISS Database: opencart-admin-csrf(56061) https://exchange.xforce.ibmcloud.com/vulnerabilities/56061
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.