4 matches found
Sql injection
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product...
CVE-2021-31867
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product...
CVE-2021-31867: Improper Neutralization of Special Elements used in an SQL Command
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product...
PT-2021-3949
Name of the Vulnerable Software and Affected Versions Pimcore Customer Data Framework versions 3.0.0 and earlier Description The issue is related to a Boolean-based blind SQL injection in the $id parameter of the SegmentAssignmentController.php component. This allows a remote attacker to disclose...