CVE-2026-54390

CVE-2026-54390 — JTL Shop Smarty SSTI Mass Exploit Pre-Auth Contact Form → Email Subject → fetch'string:' → RCE Overview CVE-2026-54390 is a critical CVSS 9.8 unauthenticated Server-Side Template Injection in JTL Shop 5.2.0–5.7.1. The SmartyRenderer::renderTemplate method passes email subject lin...

CVE-2026-54390

JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. Attackers can exploit this flaw to read sensitive...

CVE-2026-54390 JTL Shop < 5.7.2 Server-Side Template Injection via Smarty Renderer

JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. Attackers can exploit this flaw to read sensitive...

EUVD-2026-37925

JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. Attackers can exploit this flaw to read sensitive...

CVE-2026-54390 JTL Shop < 5.7.2 Server-Side Template Injection via Smarty Renderer

JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. Attackers can exploit this flaw to read sensitive...

CVE-2026-54390

Technical details are not publicly available in the provided documents. Monitor for updates from the connected sources.

CVE-2026-54390: Improper Neutralization of Special Elements Used in a Template Engine

JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. Attackers can exploit this flaw to read sensitive...

EUVD-2010-0718

Malware in sbrugna...

kaffee-total.de XSS vulnerability

Open Bug Bounty ID: OBB-594856 Description| Value ---|--- Affected Website:| kaffee-total.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| JTL-Shop Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

JTL-Shop 2 (druckansicht.php) SQL Injection Vulnerability

No description provided by source. JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vbhttp://www.sa-hacker.com/vbhttp://www.sa-hacker.com/vb + www.sec-eviles.com/vbhttp://www.sec-eviles.com/vb email : [email protected]:[email protected] Dork : Powered by...

JTL Shop 2 Remote SQL Injection Exploit

Exploit for php platform in category web applications ======================================= JTL Shop 2 Remote SQL Injection Exploit ======================================= Exploit Title: JTL Shop 2 Date: 01/08/2010 Author: TA4G - email protected Location: Algeria Vendor: www.jtl-software.de...

Sql injection

SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter...

CVE-2010-0691

SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter...

CVE-2010-0691

The vulnerability CVE-2010-0691 affects JTL-Shop 2, specifically the parameter s in the script druckansicht.php, where a SQL injection flaw allows remote attackers to execute arbitrary SQL commands. Root cause: unsafely interpolated input in the database query leads to injection. Impact per CVSS:...

CVE-2010-0691: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter...

JTL-Shop 2 SQL Injection

JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vb + www.sec-eviles.com/vb email : [email protected] Dork :" Powered by JTL-Shop 2" exp : http://server/Path/druckansicht.php?s=13 and 1=2 union select 1,2,3,4,5,concatcName,0x3a,cPass,7,8,9 from tadminlogin-...

JTL-Shop 2 (druckansicht.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= JTL-Shop 2 druckansicht.php SQL Injection Vulnerability ========================================================= JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo...

JTL-Shop 2 - druckansicht.php SQL Injection

JTL-Shop 2 - druckansicht.php SQL Injection JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vb + www.sec-eviles.com/vb email : [email protected] Dork :" Powered by JTL-Shop 2" exp : http://server/Path/druckansicht.php?s=13 and 1=2 union select...

JTL-Shop 2 - 'druckansicht.php' SQL Injection

JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vb + www.sec-eviles.com/vb email : [email protected] Dork :" Powered by JTL-Shop 2" exp : http://server/Path/druckansicht.php?s=13 and 1=2 union select 1,2,3,4,5,concatcName,0x3a,cPass,7,8,9 from tadminlogin-...