VULNERABILITY INTELLIGENCE

CVE-2019-13026

CVSS score9.8 CRITICAL
EPSS probability1.35%
CISA KEVNot currently listed
Published2019-07-30
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

OXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows SQL Injection via a crafted URL, leading to full access by an attacker. This includes all shopping cart options, customer data, and the database. No interaction between the attacker and the victim is necessary.

Weakness classification

  • nvd@nist.gov: CWE-89

Primary references