EDB-46915remotephpVERIFICADO

Shopware - createInstanceFromNamedArguments PHP Object Instantiation Remote Code Execution (Metasploit)

Metasploit5/23/2019

Ver en Exploit-DB Ver Fuente en GitLab

Análisis IAImpulsado por IA

Código del Exploit

Exploit code not available in database

Ver Fuente en GitLab

CVEs Relacionados (1)

CVE-2017-18357

6.5MEDIUM

Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via

Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via...

1/15/2019CWE-610