| Package | Affected versions | Patched versions |
|---|---|---|
| b2b suite | ≥ 1.0.0, < 1.5.1≥ 2.0.0, < 2.0.7≥ 3.0.0, < 3.1.4≥ 4.2.0, < 4.2.2≥ 4.3.0, < 4.3.7≥ 4.4.0, < 4.5.3 | 1.5.12.0.73.1.44.2.24.3.74.5.3 |
An issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search functionality of b2border and b2borderlist allows SQL injection. Possible techniques are boolean-based blind, time-based blind, and potentially stacked queries. The vulnerability allows a remote authenticated attacker to dump the underlying database.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free