Sql injection

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...

CVE-2018-20715

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...

CVE-2018-20715: Improper Neutralization of Special Elements used in an SQL Command

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...

PT-2019-10174

Name of the Vulnerable Software and Affected Versions: OXID eSales version 4.10.6 Description: The issue concerns a SQL injection vulnerability in the DB abstraction layer of OXID eSales. This vulnerability can be exploited via the oxid or synchoxid parameter to the oxConfig::getRequestParameter...