GHSA-Q9P4-QFC8-FVPP SQL Injection in medoo

columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping...

SQL Injection

catfan/Medoo is vulnerable to SQL injection. Improper escaping of user input string in the function columnQuote allows an attacker to inject and execute arbitrary SQL queries...

CVE-2019-10762

columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping...

PT-2019-12034

Name of the Vulnerable Software and Affected Versions medoo versions prior to 1.7.5 Description The issue allows remote attackers to perform a SQL Injection due to improper escaping in the columnQuote function. Recommendations For versions prior to 1.7.5, update to version 1.7.5 or later to resol...

CVE-2019-10762: Improper Neutralization of Special Elements used in an SQL Command

columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping...