Cross-Site Request Forgery Vulnerability in OpenCart by OpenCart

CVE-2010-1610

What is CVE-2010-1610?

A cross-site request forgery (CSRF) vulnerability exists in the index.php file of OpenCart 1.4, enabling remote attackers to exploit the application. This flaw allows attackers to hijack the authentication of an application administrator through crafted POST requests that target the administrative account creation feature. By manipulating the route parameter to 'user/user/insert', attackers can potentially create unauthorized administrative accounts, leading to unauthorized access and control over the OpenCart application.

References