Skip to content
OpenAdvisories

Vendor

OXID-eSales

1 known vulnerabilities.

Products

OXID eShop 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2019-25260

    OXID eShop 6.3.4 - 'sorting' SQL Injection

    OXID eShop versions 6.x prior to 6.3.4 contains a SQL injection vulnerability in the 'sorting' parameter that allows attackers to insert malicious database content. Attackers can exploit the vulnerability by manipulating the sorting parameter to inject PHP co…

    OXID-eSales OXID eShop