Arbitrary Code Execution Vulnerability in Shopware Backend Login Script

CVE-2016-3109 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code.

Learn more about our Web Application Penetration Testing UK.