CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2019/01/15 4:29 p.m.•8 views

CVE-2018-20715

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...

9.8CVSS5.8AI score0.01148EPSS

SaveExploits0References1

Prion•added 2019/01/15 4:29 p.m.•20 views

Sql injection

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...

7.5CVSS9.7AI score0.01148EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2019/01/15 12:00 a.m.•4 views

CVE-2018-20715: Improper Neutralization of Special Elements used in an SQL Command

The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter method in core/oxconfig.php...

9.8CVSS5.8AI score0.01148EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by