Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 65
Reset filtersShopware vulnerable to blind SQL-injection in DAL aggregations
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api
Shopware Improper Session Handling in store-api account logout
Broken Access Control order API in Shopware
Blind SQL injection in shopware
Shopware Has Improper Control of Generation of Code in Twig rendered views
Shopware has Improper Input Validation issue in newsletter subscription
Shopware has Insufficient Session Expiration in Administration
Shopware's log module vulnerable to Improper Output Neutralization
Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views
Shopware vulnerable to Improper Input Validation of Clearance sale in cart
Shopware database password is leaked to an unauthenticated users
Improper Access Control in Shopware
Server-Side Request Forgery (SSRF) in Shopware
Incorrect Authentication in shopware
HTTP caching is marking private HTTP headers as public in Shopware
HTML injection possibility in voucher code form in Shopware
Shopware user session is not logged out if the password is reset via password recovery
Webcache Poisoning in shopware/platform and shopware/core
Insecure direct object reference of log files of the Import/Export feature
Command injection in mail agent settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.