CVE-2019-13026

2019-07-3019:39:25

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.6%

JSON

OXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows SQL Injection via a crafted URL, leading to full access by an attacker. This includes all shopping cart options, customer data, and the database. No interaction between the attacker and the victim is necessary.

References

oxidforge.org/en/security-bulletin-2019-001.html