SQL Injection

Overview shopware/platform is a Shopware e-commerce core. Affected versions of this package are vulnerable to SQL Injection through the aggregations object. An attacker can manipulate the SQL queries and potentially access or alter data by injecting malicious SQL code into the name field...

Shopware SQL Injection Vulnerability

Shopware is a suite of open source e-commerce software from the German company Shopware. A SQL injection vulnerability exists in Shopware 6.5.7.3 and earlier versions, which stems from a SQL injection vulnerability in the name field of the aggregations object...