EUVD-2023-43361

Malicious code in bioql PyPI...

CVE-2023-39654

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.searchtosymboldict...

CVE-2023-39654

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.searchtosymboldict...

CVE-2023-39654

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.searchtosymboldict...

Sql injection

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.searchtosymboldict...

CVE-2023-39654

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.searchtosymboldict...

PT-2023-27057 · Abupy · Abupy

Name of the Vulnerable Software and Affected Versions: abupy versions up to v0.4.0 Description: The issue is a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.search to symbol dict. This vulnerability allows for potential exploitation. Recommendations: For versions up to...

CVE-2023-39654

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.searchtosymboldict...

CVE-2023-39654: Improper Neutralization of Special Elements used in an SQL Command

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.searchtosymboldict...

CVE-2023-39654

The CVE-2023-39654 entry details a SQL injection in the Python package abupy up to v0.4.0, exploiting the function component abupy.MarketBu.ABuSymbol.search_to_symbol_dict. The root cause is input handling in this component, enabling untrusted input to affect SQL queries. Affected versions are up...