CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

Github Security Blog•added 2022/05/14 1:39 a.m.•29 views

Shopware SQL Injection

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...

8.8CVSS7.8AI score0.01107EPSS

SaveExploits0References4Affected Software1

OSV•added 2022/05/14 1:39 a.m.•38 views

GHSA-42GV-77F4-R3J9 Shopware SQL Injection

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...

8.8CVSS8.9AI score0.01107EPSS

SaveExploits0References3

Prion•added 2019/01/15 4:29 p.m.•26 views

Sql injection

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...

6.5CVSS8.9AI score0.01107EPSS

SaveExploits0References1Affected Software1

NVD•added 2019/01/15 4:29 p.m.•28 views

CVE-2018-20713

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...

8.8CVSS8.9AI score0.01107EPSS

SaveExploits0References1

CVE•added 2019/01/15 4:00 p.m.•71 views

CVE-2018-20713

CVE-2018-20713 concerns Shopware prior to version 5.4.3, which is vulnerable to a SQL injection by remote authenticated users (SW-21404). The root cause, as detailed by multiple sources, is insufficient input validation in critical parameters (e.g., newName , defaultValue , table , name ), allowi...

8.8CVSS8.8AI score0.01107EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2019/01/15 4:00 p.m.•34 views

CVE-2018-20713

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...

8.9AI score0.01107EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2019/01/15 12:00 a.m.•3 views

CVE-2018-20713: Improper Neutralization of Special Elements used in an SQL Command

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...

8.8CVSS5.8AI score0.01107EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by