opencart-error-log: OpenCart Error Log Disclosure

id: opencart-error-log

info:
  name: OpenCart Error Log Disclosure
  author: DhiyaneshDk
  severity: medium
  description: |
    Detected exposed OpenCart error log files that may contain sensitive information
    including file paths, database errors, PHP warnings, and internal application details.
  reference:
    - https://www.opencart.com/
    - https://docs.opencart.com/en-gb/administration/
  metadata:
    verified: true
    max-request: 5
  tags: opencart,exposure,logs,disclosure,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/system/storage/logs/error.log"
      - "{{BaseURL}}/opencart/system/storage/logs/error.log"
      - "{{BaseURL}}/storage/logs/error.log"
      - "{{BaseURL}}/error.log"
      - "{{BaseURL}}/system/logs/error.log"

    stop-at-first-match: true

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "PHP Notice"
          - "PHP Warning"
          - "PHP Error"
          - "PHP Fatal error"
          - "opencart"
          - "catalog/controller"
          - "catalog/model"
          - "system/library"
          - "Undefined index"
          - "MySQL"
          - "mysqli"
        condition: or

      - type: regex
        part: body
        regex:
          - "\\d{4}-\\d{2}-\\d{2}\\s+\\d{2}:\\d{2}:\\d{2}"
          - "\\[error\\]|\\[warning\\]|\\[notice\\]"
        condition: or

      - type: status
        status:
          - 200
# digest: 490a0046304402206d001700f4a3fd7dd7ad7b6d597daf18a7dbe72b9a89b42bd50bd6cc1b3ff479022024a1efeb30f44e211d07525b771bfeb6256c45af14b69c0078f924cf22253913:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.