Fixed vat validation to prevents numbers for other countries
passing
Fixed path disclosure due to Null-Byte (%00) attack at the URI
Details: http://www.exploit-db.com/exploits/17108/
Fixed path disclosure through constructor
Details: http://www.techchattr.com/never-use-opencart
Fixed path disclosure
Details: http://iedb.ir/exploits-1644.html
Fixed object injection vulnerability
Details: http://www.securityfocus.com/archive/1/532763