The 2014 Pwnie Nominee For Lamest Vendor Response

OpenCart PHP Object Injection Vulnerability

OpenCart PHP Object Injection Vulnerability

Daniel from OpenCart

This is probably not the best way to respond to a security researcher:

“I tried to be polite in reporting the issue, firstly using your contact form and then (seeing I haven’t received any reply) using your community forum. I just asked for an email address where to send the vulnerability’s details,”

it was not ignored dick head why lie! are you a professional or not? professionals don’t need to lie to prove a point they use facts!

Daniel from OpenCart

This is probably not the best way to respond to a security researcher:

“I tried to be polite in reporting the issue, firstly using your contact form and then (seeing I haven’t received any reply) using your community forum. I just asked for an email address where to send the vulnerability’s details,”

it was not ignored dick head why lie! are you a professional or not? professionals don’t need to lie to prove a point they use facts!

OpenCart PHP Object Injection Vulnerability