https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 08:40:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-265145 EUVD-2026-265145 https://cve.radiocsirt.org/vuln/euvd-2026-265145 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22242 <p>CoreShop is a Pimcore enhanced eCommerce solution. Prior to version 4.1.8, a blind SQL injection vulnerability exists in the application that allows an authenticated administrator-level user to extract database contents using boolean-based or time-based techniques. The database account used by the application is read-only and non-DBA, limiting impact to confidential data disclosure only. No data modification or service disruption is possible. This issue has been patched in version 4.1.8.</p> <p>CoreShop is a Pimcore enhanced eCommerce solution. Prior to version 4.1.8, a blind SQL injection vulnerability exists in the application that allows an authenticated administrator-level user to extract database contents using boolean-based or time-based techniques. The database account used by the application is read-only and non-DBA, limiting impact to confidential data disclosure only. No data modification or service disruption is possible. This issue has been patched in version 4.1.8.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-22242 https://cve.radiocsirt.org/vuln/ghsa-ch7p-mpv4-4vg4 <p><strong>Affected:</strong> Packagist: coreshop/core-shop</p> <p>### Affected Version(s)</p> <p>- CoreShop 4.1.2 Demo (tested) [Demo | CoreShop](https://docs.coreshop.com/CoreShop/Getting_Started/Demo/index.html) - Earlier versions may also be affected if the same code path exists</p> <p>### Summary</p> <p>A blind SQL injection vulnerability exists in the application that allows an authenticated administrator-level user to extract database contents using boolean-based or time-based techniques. The database account used by the application is read-only and non-DBA, limiting impact to confidential data disclosure only. No data modification or service disruption is possible.</p> <p>### Details</p> <p>The vulnerability occurs due to unsanitized user input being concatenated into a SQL query without proper parameterization.</p> <p>An attacker with administrative access can manipulate the affected parameter to influence the backend SQL query logic. Although no direct query output is returned, boolean and time-based inference techniques allow an attacker to extract data from the database.</p> <p>### Impact</p> <p>**Vulnerability Type:** Blind SQL Injection</p> <p>**Impact:** Confidentiality only</p> <p>An attacker can:</p> <p>- Enumerate database schema - Extract all data accessible to the application’s database user</p> <p>**CVSS v3.1 (Base Score: 4.9 – Medium)**</p> <p>``` CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N ```</p> <p>### Steps to Reproduce:</p> <p>&lt;img width=&#34;1010&#34; height=&#34;372&#34; alt=&#34;1&#34; src=&#34;https://github.com/user-attachments/assets/312422c8-f3ea-4332-8c14-59aed737da6a&#34; /&gt;</p> <p>1. **Send a Normal Request:** - Request the…</p> <p><strong>Affected:</strong> Packagist: coreshop/core-shop</p> <p>### Affected Version(s)</p> <p>- CoreShop 4.1.2 Demo (tested) [Demo | CoreShop](https://docs.coreshop.com/CoreShop/Getting_Started/Demo/index.html) - Earlier versions may also be affected if the same code path exists</p> <p>### Summary</p> <p>A blind SQL injection vulnerability exists in the application that allows an authenticated administrator-level user to extract database contents using boolean-based or time-based techniques. The database account used by the application is read-only and non-DBA, limiting impact to confidential data disclosure only. No data modification or service disruption is possible.</p> <p>### Details</p> <p>The vulnerability occurs due to unsanitized user input being concatenated into a SQL query without proper parameterization.</p> <p>An attacker with administrative access can manipulate the affected parameter to influence the backend SQL query logic. Although no direct query output is returned, boolean and time-based inference techniques allow an attacker to extract data from the database.</p> <p>### Impact</p> <p>**Vulnerability Type:** Blind SQL Injection</p> <p>**Impact:** Confidentiality only</p> <p>An attacker can:</p> <p>- Enumerate database schema - Extract all data accessible to the application’s database user</p> <p>**CVSS v3.1 (Base Score: 4.9 – Medium)**</p> <p>``` CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N ```</p> <p>### Steps to Reproduce:</p> <p>&lt;img width=&#34;1010&#34; height=&#34;372&#34; alt=&#34;1&#34; src=&#34;https://github.com/user-attachments/assets/312422c8-f3ea-4332-8c14-59aed737da6a&#34; /&gt;</p> <p>1. **Send a Normal Request:** - Request the…</p> https://cve.radiocsirt.org/vuln/ghsa-ch7p-mpv4-4vg4