Sql injection

2022-05-0413:15:00

PRIOn knowledge base

www.prio-n.com

0.006 Low

EPSS

Percentile

78.5%

JSON

MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter.

CPENameOperatorVersion
pagehelperge5.1.0
pagehelperle5.3.0
pagehelperge4.0.0
pagehelperle5.0.0
pagehelperge1.0
pagehelperle3.7.0

Name	Operator	Version
pagehelper	ge	5.1.0
pagehelper	le	5.3.0
pagehelper	ge	4.0.0
pagehelper	le	5.0.0
pagehelper	ge	1.0
pagehelper	le	3.7.0

References

github.com/pagehelper/Mybatis-PageHelper

github.com/pagehelper/Mybatis-PageHelper.git

github.com/pagehelper/Mybatis-PageHelper/issues/674

github.com/yangfar/CVE/blob/main/CVE-2022-42227.md

pagehelper.github.io/

www.cnblogs.com/secload/articles/16061420.html

0.006 Low

EPSS

Percentile

78.5%

JSON

Related for PRION:CVE-2022-28111