loadedcommerce/loaded7

loadedcommerce/loaded7

GitHubGitHub
GitHubgithub.com
www.loaded7.comwww.loaded7.com
Releases40
Frequency3 weeks 3 days
Last Release
Stars18
Loaded Commerce 7 Public Repository
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2014-5140↗
8.8 HIGH6.5 MEDIUM

The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : (colon) characters, which allows remote authenticated users to conduct SQL injection attacks via the First name and Last name fields in the address book.