RSS   Vulnerabilities for 'Shopware'   RSS

2020-07-28
 
CVE-2020-13997

CWE-522
 

 
In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled.

 
 
CVE-2020-13971

CWE-79
 

 
In Shopware before 6.2.3, authenticated users are allowed to use the Mediabrowser fileupload feature to upload SVG images containing JavaScript. This leads to Persistent XSS. An uploaded image can be accessed without authentication.

 
 
CVE-2020-13970

CWE-918
 

 
Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature. This allows an authenticated user to send HTTP, HTTPS, FTP, and SFTP requests on behalf of the Shopware platform server.

 
2019-06-23
 
CVE-2019-12935

CWE-79
 

 
Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI.

 
2019-06-13
 
CVE-2019-12799

CWE-502
 

 
In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, which can result in an arbitrary deserialization if the right class is instantiated. An attacker can leverage this deserialization to achieve remote code execution. NOTE: this issue is a bypass for a CVE-2017-18357 whitelist patch.

 
2019-01-15
 
CVE-2018-20713

CWE-89
 

 
Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404.

 
 
CVE-2017-18357

CWE-610
 

 
Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object.

 
2017-10-16
 
CVE-2017-15374

CWE-79
 

 
Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the customer and orders section of the backend. The execution occurs in the administrator backend listing when processing a preview of the customers (kunden) or orders (bestellungen). The injection can be performed interactively via user registration or by manipulation of the order information inputs. The issue can be exploited by low privileged user accounts against higher privileged (admin or moderator) accounts.

 
2017-04-21
 
CVE-2016-3109

CWE-20
 

 
The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code.

 


Copyright 2020, cxsecurity.com

 

Back to Top