auxiliary/gather/pimcore_creds_sqli

functional

Pimcore Gather Credentials via SQL Injection

view exploit source metasploittype auxiliarypublished 2018-08-13catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-14058US	medium6.5	28.6% (98th)	Exploit	2018-08-17
Pimcore before 5.3.0 allows SQL Injection via the REST web service API.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.