CVE-2019-12935

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...

CVE-2019-12935: Improper Neutralization of Input During Web Page Generation

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...

PT-2019-13034

Name of the Vulnerable Software and Affected Versions Shopware versions prior to 5.5.8 Description The issue allows for XSS via the Query String to the "backend/Login" or "backend/Login/load/" API endpoints. Recommendations For versions prior to 5.5.8, update to version 5.5.8 or later to resolve...

CVE-2016-3109

The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code...

CVE-2016-3109: Improper Input Validation

The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code...

PT-2017-8339

Name of the Vulnerable Software and Affected Versions Shopware versions prior to 5.1.5 Description The issue allows remote attackers to execute arbitrary code via the "backend/Login/load/" script. Recommendations For versions prior to 5.1.5, update to version 5.1.5 or later to resolve the issue...