SQL Injection

Pimcore is vulnerable to SQL injection. The library doesn't correctly filter the parameters to admin/asset/grid-proxy which allows attackers to inject SQL queries...

Sql injection

SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy...

CVE-2015-4426

SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy...

CVE-2015-4426: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy...

PT-2015-6587

Name of the Vulnerable Software and Affected Versions pimcore versions prior to build 3473 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the filter parameter to the "admin/asset/grid-proxy" API endpoint. Recommendations For versions prior to...