PT-2017-18122

Name of the Vulnerable Software and Affected Versions modified eCommerce Shopsoftware version 2.0.2.2 rev 10690 Description The issue concerns an XXE XML External Entity vulnerability. It is located in the "api/it-recht-kanzlei/api-it-recht-kanzlei.php" API endpoint. Recommendations For version...

CVE-2017-8110: Improper Restriction of XML External Entity Reference

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...