View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0007002 | OXID eShop (all versions) | 4.04. Security | public | 2019-06-26 14:52 | 2019-08-02 09:32 |
Reporter | marco_steinhaeuser | Assigned To | |||
Priority | urgent | Severity | crash | Reproducibility | always |
Status | resolved | Resolution | fixed | ||
Product Version | 6.1.3 | ||||
Fixed in Version | 6.0.5 | ||||
Summary | 0007002: Pre-Auth SQL injection possible | ||||
Description | Remote Code Execution possible due to the possibility of Pre-Auth SQL injection. | ||||
Additional Information | Credits: Robin Peraglie (ripstech.com) | ||||
Tags | No tags attached. | ||||
Theme | Not defined | ||||
Browser | Not defined | ||||
PHP Version | Not defined | ||||
Database Version | Not defined | ||||