CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Prion•added 2019/01/15 4:29 p.m.•25 views

Sql injection

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...

7.5CVSS9.7AI score0.01148EPSS

SaveExploits0References1Affected Software1

Mend•added 2019/01/15 4:00 p.m.•7 views

CVE-2018-20715

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...

9.8CVSS0.01148EPSS

SaveExploits0References1

Positive Technologies•added 2019/01/15 12:00 a.m.•6 views

PT-2019-10174

Name of the Vulnerable Software and Affected Versions: OXID eSales version 4.10.6 Description: The issue concerns a SQL injection vulnerability in the DB abstraction layer of OXID eSales. This vulnerability can be exploited via the oxid or synchoxid parameter to the oxConfig::getRequestParameter...

9.8CVSS0.01148EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2019/01/15 12:00 a.m.•10 views

CVE-2018-20715: Improper Neutralization of Special Elements used in an SQL Command

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...

9.8CVSS5.8AI score0.01148EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by