Pimcore is vulnerable to SQL injection. The library doesn't correctly filter the parameters to admin/asset/grid-proxy which allows attackers to inject SQL queries...
7.5CVSS7.4AI score0.02097EPSS
SaveExploits2References4Affected Software1
Prion•added 2015/08/18 5:59 p.m.•19 views
Sql injection
SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy...
