Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13235
HistoryJan 16, 2019 - 3:18 a.m.

SQL Injection

2019-01-1603:18:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.001 Low

EPSS

Percentile

41.4%

shopware/shopware is vulnerable to SQL injection attacks. A lack of validation in the newName, defaultValue, table, and name parameters allow an authenticated user to inject and execute arbitrary SQL commands.

CPENameOperatorVersion
shopware/shopwarele5.4.2

0.001 Low

EPSS

Percentile

41.4%

Related for VERACODE:13235