CVE-2010-1610: Cross-site request forgery (CSRF) vulnerability in index.php in OpenCart 1.4 allows remote attackers to hij...

Security readout for executives and security teams

OpenCart 1.4 had an administrator-side CSRF flaw that could let an attacker trick a logged-in admin into creating another admin account. The main business risk is loss of store administration control. This is an old issue, but any legacy OpenCart 1.4 deployment should be treated as exposed until checked. Most likely exposure is internet-facing or internally accessible OpenCart 1.4 admin panels where administrators browse while authenticated. Modern OpenCart versions are not identified as affected in the supplied bundle. Prioritize remediation for any live OpenCart 1.4 store, especially if it handles payments, customer data, or revenue operations. If no OpenCart 1.4 remains, document non-exposure and close as legacy risk. Mitigation focus: Inventory OpenCart instances and identify any running version 1.4.; Check OpenCart vendor guidance or advisories for fixed versions and upgrade direction.; Restrict administrative panel access with network controls where feasible..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.