Поиск уязвимостей
Количество 24
Количество 24
CVE-2022-31631
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
CVE-2022-31631
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
CVE-2022-31631
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
CVE-2022-31631
PDO::quote() may return unquoted string
CVE-2022-31631
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before ...
SUSE-SU-2023:0084-1
Security update for php7
SUSE-SU-2023:0074-1
Security update for php8
SUSE-SU-2023:0073-1
Security update for php7
GHSA-4qmr-c42j-3wg2
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
BDU:2024-07320
Уязвимость функции PDO::quote компонента ext/pdo_sqlite/sqlite_driver.c языка программирования PHP, связанная с целочисленным переполнением, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
ALT-PU-2023-1063
ALT-PU-2023-1063: package `php8.0` update to version 8.0.27-alt1
ALT-PU-2023-1058
ALT-PU-2023-1058: package `php8.1` update to version 8.1.14-alt1
ALT-PU-2023-1026
ALT-PU-2023-1026: package `php8.1` update to version 8.1.14-alt1
ALT-PU-2023-1021
ALT-PU-2023-1021: package `php8.0` update to version 8.0.27-alt1
SUSE-SU-2023:0072-1
Security update for php74
SUSE-SU-2023:0476-1
Security update for php7
RLSA-2023:2417
Moderate: php:8.1 security update
RLSA-2023:0965
Moderate: php security update
RLSA-2023:0848
Moderate: php:8.0 security update
ELSA-2023-2903
ELSA-2023-2903: php:7.4 security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-31631 In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities. | CVSS3: 9.1 | 2% Низкий | больше 1 года назад |
 | CVE-2022-31631 In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities. | CVSS3: 5.9 | 2% Низкий | почти 4 года назад |
 | CVE-2022-31631 In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities. | CVSS3: 9.1 | 2% Низкий | больше 1 года назад |
 | CVE-2022-31631 PDO::quote() may return unquoted string | 2% Низкий | 3 месяца назад | |
| CVE-2022-31631 In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before ... | CVSS3: 9.1 | 2% Низкий | больше 1 года назад |
 | SUSE-SU-2023:0084-1 Security update for php7 | 2% Низкий | почти 4 года назад | |
| SUSE-SU-2023:0074-1 Security update for php8 | 2% Низкий | почти 4 года назад | |
| SUSE-SU-2023:0073-1 Security update for php7 | 2% Низкий | почти 4 года назад | |
| GHSA-4qmr-c42j-3wg2 In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities. | CVSS3: 9.1 | 2% Низкий | больше 1 года назад |
 | BDU:2024-07320 Уязвимость функции PDO::quote компонента ext/pdo_sqlite/sqlite_driver.c языка программирования PHP, связанная с целочисленным переполнением, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 6.9 | 2% Низкий | около 4 лет назад |
| ALT-PU-2023-1063 ALT-PU-2023-1063: package `php8.0` update to version 8.0.27-alt1 | CVSS3: 9.1 | 2% Низкий | почти 4 года назад |
| ALT-PU-2023-1058 ALT-PU-2023-1058: package `php8.1` update to version 8.1.14-alt1 | CVSS3: 9.1 | 2% Низкий | почти 4 года назад |
| ALT-PU-2023-1026 ALT-PU-2023-1026: package `php8.1` update to version 8.1.14-alt1 | CVSS3: 9.1 | 2% Низкий | почти 4 года назад |
| ALT-PU-2023-1021 ALT-PU-2023-1021: package `php8.0` update to version 8.0.27-alt1 | CVSS3: 9.1 | 2% Низкий | почти 4 года назад |
| SUSE-SU-2023:0072-1 Security update for php74 | почти 4 года назад | ||
| SUSE-SU-2023:0476-1 Security update for php7 | больше 3 лет назад | ||
 | RLSA-2023:2417 Moderate: php:8.1 security update | 11 месяцев назад | ||
| RLSA-2023:0965 Moderate: php security update | больше 3 лет назад | ||
| RLSA-2023:0848 Moderate: php:8.0 security update | больше 3 лет назад | ||
| ELSA-2023-2903 ELSA-2023-2903: php:7.4 security update (MODERATE) | больше 3 лет назад |
Уязвимостей на страницу