Skip to content

OpenCart Login Panel - Detect

ID: opencart-panel

Severity: info

Author: ricardomaia

Tags: panel,opencart

OpenCart login panel was detected.

id: opencart-panel
info:
name: OpenCart Login Panel - Detect
author: ricardomaia
severity: info
description: |
OpenCart login panel was detected.
reference:
- https://www.opencart.com
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:a:opencart:opencart:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
vendor: opencart
product: opencart
shodan-query:
- html:"OpenCart"
- http.html:"opencart"
- cpe:"cpe:2.3:a:opencart:opencart"
fofa-query: body="opencart"
tags: panel,opencart
http:
- method: GET
path:
- "{{BaseURL}}/admin"
- "{{BaseURL}}/index.php?route=account/login"
host-redirects: true
max-redirects: 2
stop-at-first-match: true
matchers:
- type: regex
regex:
- '(?i)footer\s.*OpenCart.*All.Rights.Reserved|img\s.*logo.*\salt=.*OpenCart'
- "(?i)Powered.By.*http.*OpenCart"
condition: or
# digest: 490a0046304402203c69782a7efb721bc064493484b106897131776d5001041bc72ac9f9b4538ee2022015e47f8d56fbcb9e4929a78d1ac6656d75d408c59abc7a23fa8f10be04447bc7:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/opencart-panel.yaml"

View on Github