SQL Injection

Every one of the 31 is a mark on the map. Named now: 1 to 26, most at risk first.

1. SQL injection in GridHelperService.php in pimcore/pimcoreCVE-2022-1429pimcore · CVSS 7.2 · 64% likely

   CWE-89

2. SQL Injection in pimcore/pimcoreCVE-2023-1578pimcore · CVSS 6.7 · 63% likely

   CWE-89

3. SQL injection in ElementController.php in pimcore/pimcoreCVE-2022-1339pimcore · CVSS 8.8 · 5.5% likely

   CWE-89

4. SQL Injection in pimcore/pimcoreCVE-2022-0258pimcore · CVSS 8.3 · 1.7% likely

   CWE-89

5. SQL injection in RecyclebinController.php in pimcore/pimcoreCVE-2022-1219pimcore · CVSS 7.2 · 1.4% likely

   CWE-89

6. SQL injection in pimcoreCVE-2022-31092pimcore · CVSS 7.5 · 1.4% likely

   CWE-89

7. Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL InjectionCVE-2021-31867Pimcore · CVSS 6.5 · 1.2% likely

   CWE-89

8. SQL Injection in Admin Grid Filter API in PimcoreCVE-2023-47637pimcore · CVSS 8.8 · 1.2% likely

   CWE-89

9. SQL Injection in pimcore/pimcoreCVE-2023-3820pimcore · CVSS 7.2 · 1.2% likely

   CWE-89

10. Pimcore AdminBundle 'specificID' SQL InjectionCVE-2021-31869Pimcore · CVSS 6.5 · 1.1% likely

    CWE-89

11. Pimcore Admin Classic Bundle SQL Injection in Admin download files as zipCVE-2024-23646pimcore · CVSS 8.8 · 1.0% likely

    CWE-89

12. SQL Injection in pimcore/customer-data-frameworkCVE-2023-2756pimcore · CVSS 6.5 · 0.9% likely

    CWE-89

13. SQL Injection in pimcore/pimcoreCVE-2023-2338pimcore · CVSS 7.2 · 0.9% likely

    CWE-89

14. Pimcore customer-data-framework list sql injectionCVE-2024-11956Pimcore · CVSS 4.7 · 0.9% likely

    CWE-89

15. SQL Injection in pimcore/pimcoreCVE-2023-3673pimcore · CVSS 7.2 · 0.9% likely

    CWE-89

16. Pimcore vulnerable to improper quoting of filters in Custom ReportsCVE-2023-28438pimcore · CVSS 6.2 · 0.9% likely

    CWE-89

17. Pimcore has improper quoting of columns when calling methods "getByUuid" & "exists" on UUID ModelCVE-2023-28108pimcore · CVSS 7.9 · 0.9% likely

    CWE-89

18. Pimcore SQL Injection Vulnerability in Admin Translations APICVE-2023-30850pimcore · CVSS 8.8 · 0.8% likely

    CWE-89

19. Pimcore vulnerable to SQL Injection in Translation Export APICVE-2023-30849pimcore · CVSS 8.8 · 0.8% likely

    CWE-89

20. Pimcore SQL Injection Vulnerability in Admin Search Find APICVE-2023-30848pimcore · CVSS 8.8 · 0.7% likely

    CWE-89

21. Pimcore: Remote Code Execution via DataObject Class-Definition Field NameCVE-2026-55634pimcore · CVSS 9.9 · 0.7% likely

    CWE-89

22. Pimcore: SQL Injection in Mautic Custom Reports Bundle Due to Direct Concatenation of User-Controlled Configuration Fields Without ParameterizationCVE-2026-55416pimcore · CVSS 8.8 · 0.7% likely

    CWE-89

23. Pimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clauseCVE-2026-27461pimcore · CVSS 6.9 · 0.5% likely

    CWE-89

24. Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property ParameterCVE-2026-44741pimcore · CVSS 8.8 · 0.5% likely

    CWE-89

25. Pimcore Vulnerable to SQL Injection in getRelationFilterConditionCVE-2025-27617pimcore · CVSS 6.3 · 0.5% likely

    CWE-89

26. Pimcore has a Blind SQL Injection in Admin Search Find API due to an incomplete fix for CVE-2023-30848CVE-2026-23492pimcore · CVSS 8.8 · 0.5% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.