|
|
| Reporter | marco_steinhaeuser | Assigned To | | |
|---|
| Priority | normal | Severity | minor | Reproducibility | always |
|---|
| Status | resolved | Resolution | fixed | |
|---|
| Product Version | 6.1.3 | |
|---|
| Fixed in Version | 6.1.4 | |
|---|
|
|
| Summary | 0006974: Parameters are not escaped in RDFa payment data |
|---|
| Description | The user-controlled parameter is directly placed into the SQL statement without any escaping |
|---|
| Steps To Reproduce | see https://bugs.oxid-esales.com/view.php?id=6974#c12867 for steps to reproduce |
|---|
| Additional Information | Pls see https://bugs.oxid-esales.com/view.php?id=6974#c12868 for additional information |
|---|
| Tags | No tags attached. |
|---|
|
|
| Theme | Not defined |
|---|
| Browser | Not defined |
|---|
| PHP Version | Not defined |
|---|
| Database Version | Not defined |
|---|
|
|
