TI-2014-04204 CVE-2014-5140 · GHSA-jq73-v9pp-jgx4The bindReplace function in the query factory in includes/classes/database.php in Loaded…Priority MEDIUM 43The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly handle : (colon) characters, which allows remote authenticated users to conduct SQL injection attacks…CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02682 · Published 2020-01-03 · No fix listed CWE-89
