SQL Injection

Pimcore is vulnerable to SQL injection. The library doesn't correctly filter the parameters to admin/asset/grid-proxy which allows attackers to inject SQL queries...

Sql injection

SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy...