Lucene search
+L

7 matches found

NVD
NVD
•added 2026/01/15 4:16 p.m.•21 views

CVE-2021-47763

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS0.00334EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/01/15 3:52 p.m.•13 views

CVE-2021-47763

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS5.9AI score0.00334EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/15 3:52 p.m.•56 views

CVE-2021-47763 Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort' SQL injection

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS0.00334EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/01/15 3:52 p.m.•22 views

EUVD-2026-2770

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS5.9AI score0.00334EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/15 12:00 a.m.•5 views

PT-2026-6436

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS5.9AI score0.00334EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/15 12:00 a.m.•6 views

CVE-2021-47763: Improper Neutralization of Special Elements used in an SQL Command

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS5.9AI score0.00334EPSS
SaveExploits0References2
GitLab Advisory Database
GitLab Advisory Database
•added 2026/01/15 12:00 a.m.•25 views

Aimeos contains a SQL injection vulnerability in the json api 'sort' parameter

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

8.8CVSS5.9AI score0.00334EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder