Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4qmr-c42j-3wg2

Опубликовано: 13 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

EPSS

Процентиль: 10%
0.00037
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 9.1
ubuntu
4 месяца назад

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

CVSS3: 5.9
redhat
больше 2 лет назад

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

CVSS3: 9.1
nvd
4 месяца назад

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

CVSS3: 9.1
debian
4 месяца назад

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before ...

suse-cvrf
больше 2 лет назад

Security update for php7

EPSS

Процентиль: 10%
0.00037
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-74