Pimcore SQLi Vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-14058 · ADVISORY
• exploit-db.com/exploits/45208 · WEB
• sec-consult.com/en/blog/advisories/sql-injection-xss-csrf-vulnerabilities-in-pimcore-software · WEB
• packetstormsecurity.com/files/148954/Pimcore-5.2.3-CSRF-Cross-Site-Scripting-SQL-Injection.html · WEB
• seclists.org/fulldisclosure/2018/Aug/13 · WEB
• exploit-db.com/exploits/45208 · Exploit
• sec-consult.com/en/blog/advisories/sql-injection-xss-csrf-vulnerabilities-in-pimcore-software · Exploit

Lỗ hổng khác của pimcore/pimcore

• CVE-2026-55416CAO 8.8Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, an authenticated user with reports…
• CVE-2026-55072CAO 8.5Pimcore is an Open Source Data & Experience Management Platform. Prior to 2026.1.5, an authenticated user with the objects permission can su…
• CVE-2026-55634NGHIÊM TRỌNG 9.9Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoi…
• CVE-2026-55220NGHIÊM TRỌNG 9.3Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefi…
• CVE-2026-45704CAO 7.1Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, CustomReports uses inconsistent authoriz…