OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background.
