CVE-2026-42474

The MixPHP Framework versions 2.x through 2.2.17 are susceptible to an SQL injection vulnerability. The root cause is the improper manipulation of the data array parameter within the data function of the BuildHelper.php file. A crafted data array can be used to execute unauthorized SQL commands. ...

CVE-2026-42475

The MixPHP Framework (versions 2.x through 2.2.17 ) is vulnerable to an SQL injection vulnerability. The root cause is the improper manipulation of the on array parameter within the joinOn() function located in the BuildHelper.php file. An attacker can exploit this by providing a crafted on array...