Lucene search
+L

3 matches found

OSV
OSV
added 2026/09/10 7:25 p.m.7 views

GHSA-23RH-XW42-FQ82 Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

8.8CVSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/09/10 7:25 p.m.9 views

Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.5 views

PT-2026-89734

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reports config permission can inject...

8.8CVSS
SaveExploits0References6
Rows per page
Query Builder