Remote Code Execution

Shopware is vulnerable to Remote Code Execution. This vulnerability is due to insufficient validation, allowing attackers to inject foreign code...

Shopware Remote Code Execution Vulnerability

Under certain circumstances, it’s possible to execute an unauthorized foreign code in Shopware in versions prior to 5.2.16. One possible threat is if a template that doesn’t derive from the Shopware standard has been completely copied. Themes or plugins that execute or overwrite the following...