2 matches found
GHSA-Q9P4-QFC8-FVPP SQL Injection in medoo
columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping...
9.8CVSS9.8AI score0.01421EPSS
SaveExploits0References4
SQL Injection
catfan/Medoo is vulnerable to SQL injection. Improper escaping of user input string in the function columnQuote allows an attacker to inject and execute arbitrary SQL queries...
9.8CVSS4.6AI score0.01421EPSS
SaveExploits0References1Affected Software1
20