EUVD-2022-1785

Malicious code in bioql PyPI...

SQL Injection in Pimcore

Pimcore prior to version 10.3.5 is vulnerable to SQL injection in ElementController.php. This vulnerability causes loss of data confidentiality...

GHSA-MJ2C-5MJV-GMMJ SQL Injection in Pimcore

Pimcore prior to version 10.3.5 is vulnerable to SQL injection in ElementController.php. This vulnerability causes loss of data confidentiality...

CVE-2022-1339

SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data...

SQL injection in ElementController.php

Description The property parameter is append to the sql query directly, which leads to a sql injection problem. if you set a wrong value. you can see the error from log. then you can check the result. after injection Proof of Concept // PoC.js "body":...