6Daksiadf4Bjujiv8Mwq

**Name of the Vulnerable Software and Affected Versions** osCommerce version 4.14.63493 **Description** A security flaw exists in the Email Template Configuration component. A remote attacker can perform a SQL injection by manipulating the `email templates key` argument within the `EmailController()` function located in the app/lib/backend/controllers/EmailController.php file. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** As a temporary workaround, restrict access to the `EmailController()` function in the app/lib/backend/controllers/EmailController.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BeikeShop versions prior to 1.6.0.22 **Description** An issue exists in the Admin Design Builder Endpoint within the file beike/Admin/Routes/admin.php. A remote attacker can perform a manipulation of the `settings.value` argument to execute a SQL injection, which is a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** Deploy patch 2fa9805411088069fcc3b0c15b2f1f33d6e09958 for versions prior to 1.6.0.22.