Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/01/16 4:20 p.m.•11 views

CVE-2021-47763

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS8AI score0.00339EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/15 4:16 p.m.•14 views

CVE-2021-47763

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS0.00339EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/01/15 3:52 p.m.•15 views

EUVD-2026-2770

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS7.4AI score0.00339EPSS
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
•added 2026/01/15 12:00 a.m.•17 views

Aimeos contains a SQL injection vulnerability in the json api 'sort' parameter

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS8AI score0.00339EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
•added 2026/01/15 12:00 a.m.•18 views

Aimeos SQL injection vulnerability

Aimeos is an open-source e-commerce framework designed for online stores. The Aimeos 2021.10 LTS version has a SQL injection vulnerability. This vulnerability stems from the SQL injection in the json api sort parameter, which could allow attackers to inject malicious database queries...

8.8CVSS5.8AI score0.00339EPSS
SaveExploits0References3
Rows per page
Query Builder