Magento 2 Community Edition SQLi Vulnerability

🗓️ 24 May 2022 22:00:38Reported by GitHub Advisory DatabaseType

Magento 2 SQLi Vulnerability Fi

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2019-7139	4 May 202407:34	–	circl
CNVD	Magento SQL Injection Vulnerability	12 Apr 201900:00	–	cnvd
CVE	CVE-2019-7139	10 Apr 201917:07	–	cve
Cvelist	CVE-2019-7139	10 Apr 201917:07	–	cvelist
Dsquare	Magento 2 SQL Injection	7 Apr 201900:00	–	dsquare
Friends Of PHP	SUPEE-11086 - RCE, XSS, CSRF and other vulnerabilities	26 Mar 201900:00	–	friendsofphp
Friends Of PHP	SUPEE-11086 - RCE, XSS, CSRF and other vulnerabilities	26 Mar 201900:00	–	friendsofphp
Friends Of PHP	PRODSECBUG-2198: SQL Injection due to a flaw in MySQL adapter	25 Jun 201900:00	–	friendsofphp
Nuclei	Magento - SQL Injection	22 Jun 202605:20	–	nuclei
NVD	CVE-2019-7139	10 Apr 201918:29	–	nvd

Vulners

Node

magento community-editionRange2.3.0–2.3.2composer

magento community-editionRange2.2.0–2.2.9composer

magento community-editionRange2.1.0–2.1.18composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-7139
ambionics	www.ambionics.io/blog/magento-sqli
web	www.web.archive.org/web/20211206084839/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ce/CVE-2019-7139.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ee/CVE-2019-7139.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7139.yaml
magento	www.magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
magento	www.magento.com/security/patches/supee-11086
github	www.github.com/advisories/GHSA-4j6w-9rf8-hg7r

12 Feb 2024 11:29Current

7.5High risk

Vulners AI Score7.5

CVSS 27.5

CVSS 39.8

EPSS0.17437