Sql injection

2019-07-3020:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.6%

JSON

OXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows SQL Injection via a crafted URL, leading to full access by an attacker. This includes all shopping cart options, customer data, and the database. No interaction between the attacker and the victim is necessary.

CPENameOperatorVersion
eshopge6.0.0
eshoplt6.0.5
eshopge6.1.0
eshoplt6.1.4

Name	Operator	Version
eshop	ge	6.0.0
eshop	lt	6.0.5
eshop	ge	6.1.0
eshop	lt	6.1.4

References

oxidforge.org/en/security-bulletin-2019-001.html