Lucene search
PRIOn knowledge basePRION:CVE-2019-8130HistoryNov 06, 2019 - 12:15 a.m.
Sql injection
2019-11-0600:15:00
PRIOn knowledge base
www.prio-n.com
2
A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with store manipulation privileges can execute arbitrary SQL queries by getting access to the database connection through group instance in email templates.
Related
cve
cve
CVE-2019-8130
2019-11-06 00:15:10
osv
osv
CVE-2019-8130
2019-11-06 00:15:10
veracode
veracode
SQL Injection
2024-06-20 08:38:02
friendsofphp
friendsofphp
PRODSECBUG-2424: SQL injection when accessing group data in email templates
2019-10-08 00:00:00
cvelist
cvelist
CVE-2019-8130
2019-11-05 23:06:06
github
github
Magento SQL injection vulnerability
2022-05-24 17:00:26
nvd
nvd
CVE-2019-8130
2019-11-06 00:15:10
openvas
openvas