https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T07:28:24.869262+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2014-5140 fkie_cve-2014-5140 2026-10-07T07:28:24.918718+00:00

The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : (colon) characters, which allows remote authenticated users to conduct SQL injection attacks via the First name and Last name fields in the address book.

 https://vulnerability.circl.lu/vuln/ghsa-jq73-v9pp-jgx4 GHSA-jq73-v9pp-jgx4 2026-10-07T07:28:24.918821+00:00

The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : (colon) characters, which allows remote authenticated users to conduct SQL injection attacks via the First name and Last name fields in the address book.

 https://vulnerability.circl.lu/vuln/gsd-2014-5140 gsd-2014-5140 2026-10-07T07:28:24.918856+00:00 gsd-2014-5140