Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OpenCart json_decode function Remote PHP Code Execution #4220

Closed
ghost opened this issue Apr 9, 2016 · 2 comments
Closed

OpenCart json_decode function Remote PHP Code Execution #4220

ghost opened this issue Apr 9, 2016 · 2 comments

Comments

@ghost
Copy link

ghost commented Apr 9, 2016

Removed comment for breach of our guidelines. - James
@kanenas
Copy link
Contributor

kanenas commented Apr 9, 2016

@n4s3r, shouldn't you PM an OpenCart moderator/administrator on the forum before disclosing security issues?

If you would like to report a serious security bug please PM an OpenCart moderator/administrator on the forum. Please do not report concept/ideas/unproven security flaws - all security reports are taken seriously but you must include the EXACT details steps to reproduce it. Please DO NOT post security flaws in a public location.

@opencart opencart locked and limited conversation to collaborators Apr 10, 2016
@jamesallsup
Copy link
Contributor

Thank you for your effort of finding this bug, but considering you posted it without concern for others on a public place it shows that you didn't read our very clear instructions.

Your report has been copied to our internal tracker and will be investigated so do not re-post it.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@kanenas @jamesallsup