2 matches found
CVE-2018-20715
The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...
9.8CVSS9.8AI score0.01148EPSS
SaveExploits0References1
Sql injection
The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...
7.5CVSS9.7AI score0.01148EPSS
SaveExploits0References1Affected Software1
20