Lucene search
GoogleOSV:GHSA-Q4HW-C66H-4XQCHistoryMay 14, 2022 - 2:36 a.m.
Pimcore SQLi Vulnerability
2022-05-1402:36:54
Google
osv.dev
10
pimcore 5.3.0
sql injection
rest api
vulnerability
EPSS
0.009
Percentile
82.9%
Pimcore before 5.3.0 allows SQL Injection via the REST web service API.
References
packetstormsecurity.com/files/148954/Pimcore-5.2.3-CSRF-Cross-Site-Scripting-SQL-Injection.html
seclists.org/fulldisclosure/2018/Aug/13
nvd.nist.gov/vuln/detail/CVE-2018-14058
www.exploit-db.com/exploits/45208
www.sec-consult.com/en/blog/advisories/sql-injection-xss-csrf-vulnerabilities-in-pimcore-software
Related
veracode
veracode
SQL Injection
2018-08-17 06:14:13
github
github
Pimcore SQLi Vulnerability
2022-05-14 02:36:54
packetstorm
packetstorm
Pimcore Gather Credentials via SQL Injection
2024-08-31 00:00:00
Pimcore 5.2.3 CSRF / Cross Site Scripting / SQL Injection
2018-08-16 00:00:00
prion
prion
Sql injection
2018-08-17 18:29:00
osv
osv
CVE-2018-14058
2018-08-17 18:29:00
cvelist
cvelist
CVE-2018-14058
2018-08-17 18:00:00
nvd
nvd
CVE-2018-14058
2018-08-17 18:29:00
cve
cve
CVE-2018-14058
2018-08-17 18:29:00
metasploit
metasploit
Pimcore Gather Credentials via SQL Injection
2018-09-19 13:11:45
exploitdb
exploitdb
zdt
zdt
exploitpack
exploitpack