CVE-2016-3109

Critical

Published: 21/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The backend/Login/load/ script in Shopware before version 5.1.5 allows remote attackers to execute arbitrary code.

Exploitation of this vulnerability could lead to an attacker gaining control over the system, posing a serious threat to data security.

It is recommended to update Shopware to version 5.1.5 or later to mitigate this vulnerability.

Original NVD description (English source)

The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code.