A critical SQL injection vulnerability in OpenCart Core 4.0.2.3 allows unauthenticated remote attackers to extract sensitive database information, posing a significant risk to data confidentiality.

This is an improper neutralization of special elements used in an SQL command (CWE-89). Unauthenticated attackers can inject malicious SQL code into the search parameter of the product search endpoint (index.php?route=product/search) to perform boolean-based or time-based blind SQL injection attacks.

Successful exploitation of this vulnerability can lead to the unauthorized extraction of sensitive information from the application database, including customer data, order details, or administrative credentials. Given the CVSS score of 8.2, this represents a high-severity risk that could result in severe reputational damage, regulatory non-compliance, and compromised business operations.

Immediate Action: Upgrade OpenCart Core to version 4.1.0.0 or later, as this version contains the necessary security fixes for this flaw.

Proactive Monitoring: Review web server access logs for anomalous GET requests targeting the product search endpoint, particularly those containing SQL syntax characters like single quotes, dashes, or SQL keywords.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured to detect and block common SQL injection patterns directed at the search parameter to provide temporary protection while the upgrade is being scheduled.

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the Exploit-DB entry 51940.

The presence of a publicly available proof-of-concept significantly lowers the barrier for attackers to exploit this vulnerability. Organizations running OpenCart version 4.0.2.3 are urged to prioritize the update to version 4.1.0.0 immediately to eliminate this critical security gap and protect sensitive database assets.