Lucene search
GoogleOSV:GHSA-9MR8-6PRP-GWJVHistorySep 10, 2018 - 3:20 p.m.
SQL Injection in query-mysql
2018-09-1015:20:30
Google
osv.dev
7
0.001 Low
EPSS
Percentile
39.3%
All versions of query-mysql are vulnerable to SQL injection due to lack of user input sanitization allows to run arbitrary SQL queries when fetching data from database.
Recommendation
No fix is currently available for this vulnerability. It is our recommendation to not install or use this module if user input is passed into this module.
| CPE | Name | Operator | Version |
|---|---|---|---|
| query-mysql | le | 0.0.2 |
Related
hackerone
hackerone
veracode
veracode
SQL Injection
2018-05-15 07:59:31
cve
cve
CVE-2018-3754
2018-07-03 21:29:00
cvelist
cvelist
CVE-2018-3754
2018-05-24 00:00:00
nodejs
nodejs
SQL Injection
2018-05-16 19:54:52
prion
prion
Sql injection
2018-07-03 21:29:00
nvd
nvd
CVE-2018-3754
2018-07-03 21:29:00
github
github
SQL Injection in query-mysql
2018-09-10 15:20:30