SQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data via customer/order?orderSearchForm[searchText]=
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/172257/Spryker-Commerce-OS-1.0-SQL-Injection.html | Exploit Third Party Advisory |
| http://seclists.org/fulldisclosure/2023/May/2 | Exploit Third Party Advisory |
| https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-001.txt | Exploit Third Party Advisory |
| https://www.schutzwerk.com/blog/schutzwerk-sa-2023-001/ | Exploit Third Party Advisory |
| http://packetstormsecurity.com/files/172257/Spryker-Commerce-OS-1.0-SQL-Injection.html | Exploit Third Party Advisory |
| http://seclists.org/fulldisclosure/2023/May/2 | Exploit Third Party Advisory |
| https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-001.txt | Exploit Third Party Advisory |
| https://www.schutzwerk.com/blog/schutzwerk-sa-2023-001/ | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/172257/Spryker-Commerce-OS-1.0-SQL-Injection.html - Exploit, Third Party Advisory | |
| References | () http://seclists.org/fulldisclosure/2023/May/2 - Exploit, Third Party Advisory | |
| References | () https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-001.txt - Exploit, Third Party Advisory | |
| References | () https://www.schutzwerk.com/blog/schutzwerk-sa-2023-001/ - Exploit, Third Party Advisory |
Information
Published : 2023-05-04 02:15
Updated : 2024-11-21 07:53
NVD link : CVE-2023-27568
Mitre link : CVE-2023-27568
CVE.ORG link : CVE-2023-27568
JSON object : View
Products Affected
spryker
- commerce_os
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')