CVE-2014-3990

The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side request forgery (SSRF) attacks or possibly conduct XML External Entity (XXE) attacks and execute arbitrary code via a crafted serialized PHP object, related to the quantity parameter in an update request.

• CWE-611
• CWE-918

• http://karmainsecurity.com/KIS-2014-08Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/127460/OpenCart-1.5.6.4-PHP-Object-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2014/Jul/67Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/532763/100/0/threadedExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/68529Third Party Advisory, VDB Entry
• https://github.com/opencart-ce/opencart-ce/commit/c2aafc823bd85876f5e888f8ebc421069a5e076fIssue Tracking, Patch, Third Party Advisory
• http://karmainsecurity.com/KIS-2014-08Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/127460/OpenCart-1.5.6.4-PHP-Object-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2014/Jul/67Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/532763/100/0/threadedExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/68529Third Party Advisory, VDB Entry
• https://github.com/opencart-ce/opencart-ce/commit/c2aafc823bd85876f5e888f8ebc421069a5e076fIssue Tracking, Patch, Third Party Advisory

Published

Mar 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3981acinclude.m4, as used in the configure script in PHP 5.5.13 …
• CVE-2014-3982include/tests_webservers in Lynis before 1.5.5 on AIX allows…
• CVE-2014-3984Multiple unspecified vulnerabilities in Libav before 0.8.12 …
• CVE-2014-3985The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 a…
• CVE-2014-3986include/tests_webservers in Lynis before 1.5.5 allows local …
• CVE-2014-3988Cross-site scripting (XSS) vulnerability in index.php in Sun…
• CVE-2014-3991Multiple cross-site scripting (XSS) vulnerabilities in Dolib…
• CVE-2014-3992Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3…
• CVE-2014-3994Cross-site scripting (XSS) vulnerability in util/templatetag…
• CVE-2014-3995Cross-site scripting (XSS) vulnerability in gravatars/templa…
• CVE-2014-3996SQL injection vulnerability in the LinkViewFetchServlet serv…
• CVE-2014-3997SQL injection vulnerability in the MetadataServlet servlet i…