<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: opencart</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/opencart.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2010-05-25T00:00:00+00:00</updated><author><name>Simon Willison</name></author><entry><title>OpenCart CSRF Vulnerability</title><link href="https://simonwillison.net/2010/May/25/opencart/#atom-tag" rel="alternate"/><published>2010-05-25T00:00:00+00:00</published><updated>2010-05-25T00:00:00+00:00</updated><id>https://simonwillison.net/2010/May/25/opencart/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://blog.visionsource.org/2010/01/28/opencart-csrf-vulnerability/"&gt;OpenCart CSRF Vulnerability&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
Avoid OpenCart—it’s vulnerable to CSRF, but the maintainer has no intention of fixing it as “there is no way that I’m responsible for a client being stupid enough to click links in emails”.


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/csrf"&gt;csrf&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/security"&gt;security&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/recovered"&gt;recovered&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/opencart"&gt;opencart&lt;/a&gt;&lt;/p&gt;



</summary><category term="csrf"/><category term="security"/><category term="recovered"/><category term="opencart"/></entry></feed>