Loaded Commerce Loaded7
Approved changes feed: RSS · Atom
cpe:2.3:a:loadedcommerce:loaded7:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Loadedcommerce (f6510b89-bd60-51fd-82be-71cb71fdd42a) |
|---|---|
| Product | Loaded7 (5462fd42-208a-56ef-8aa9-1bc24977a896) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/loadedcommerce/loaded7 |
purl2cpe | 2026-06-01 10:13:15.083482 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-5140 |
vulnerable | 2026-06-08 05:05:47.033415 |
Details available
The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : (colon) characters, which allows remote authenticated users to conduct SQL injection attacks via the First name and Last name fields in the address book.
Published: 2020-01-03T19:50:52.000Z
Updated: 2024-08-06T11:34:37.518Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.