CVE-2016-3109

🗓️ 21 Apr 2017 20:00:00Reported by MendType

mend🔗 www.mend.io👁 12 Views

Remote code execution in the Shopware backend/Login/load/ script.

Reporter	Title	Published	Views	Family All 13
CNVD	Shopware Remote Code Execution Vulnerability	28 Apr 201600:00	–	cnvd
Check Point Advisories	Shopware getTemplateName Local File Inclusion (CVE-2016-3109)	16 Jun 201600:00	–	checkpoint_advisories
CVE	CVE-2016-3109	21 Apr 201720:00	–	cve
Cvelist	CVE-2016-3109	21 Apr 201720:00	–	cvelist
Dsquare	Shopware Server Side Template Injection RCE	28 Mar 201800:00	–	dsquare
Friends Of PHP	Unauthenticated Remote Code Execution Vulnerability	8 Apr 201608:54	–	friendsofphp
Github Security Blog	Shopware RCE Vulnerability	14 May 202202:46	–	github
NVD	CVE-2016-3109	21 Apr 201720:59	–	nvd
osv_cve	CVE-2016-3109	21 Apr 201720:59	–	osv_cve
osv_ghsa	GHSA-CJ2F-96JQ-PHPP Shopware RCE Vulnerability	14 May 202202:46	–	osv_ghsa

Vulners

Node

shopware shopwareRange5.0.0–5.1.5

Source	Link
web	www.web.archive.org/web/20210125193827/http://www.securityfocus.com/bid/97979
community	www.community.shopware.com/_detail_1918.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-3109
github	www.github.com/shopware/shopware/commit/d73e9031a5b2ab6e918eb86d1e2b2e873cd3558d
securityfocus	www.securityfocus.com/archive/1/538173/100/0/threaded
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/shopware/shopware/CVE-2016-3109.yaml
securityfocus	www.securityfocus.com/bid/97979
web	www.web.archive.org/web/20200814090044/http://www.securityfocus.com/archive/1/538173/100/0/threaded
packetstormsecurity	www.packetstormsecurity.com/files/136781/Shopware-Remote-Code-Execution.html

06 Oct 2026 02:35Current

CVSS 49.3

CVSS 3.19.8

CVSS 39.8

CVSS 210

EPSS0.28106