boltcm-newsletter-sender (>=0.0.1-alpha1, <=0.0.1-alpha3), db2md (>=0.0.1, <=0.0.2) +9 more potentially affected by CVE-2015-1369 via sequelize (>=2.0.0-alpha2, <=2.0.0-rc4)

sequelize NPM version =2.0.0-alpha2, =0.0.1-alpha1, =0.0.1, =2.0.0, =0.0.2, =0.0.2, =0.2.10, =2.0.0-beta.0, =2.0.0-beta.0, =2.0.0-beta.0, =2.0.0-beta.2 - willikins 0.0.17 Source cves: CVE-2015-1369 Source advisory: OSV:GHSA-XQG8-CV3H-XPPV...

CVE-2015-1369

Summary: CVE-2015-1369 is a SQL injection in Sequelize for Node.js, affecting versions up to and including 2.0.0-rc7 where user input placed in the order parameter can lead to arbitrary SQL execution. The issue is caused by unsafe handling of the order input, enabling attackers to influence queri...

@weiqiwang/nodejs-develop-kit (1.2.0), alke (>=0.0.1, <=0.0.2) +76 more potentially affected by CVE-2015-1369 via sequelize (>=1.0.2, <=2.0.0-rc4)

sequelize NPM version =1.0.2, =0.0.1, =0.0.1, =0.1.0, =0.0.1-alpha1, =0.0.2, =0.0.1, =0.0.7, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2015-1369 Source advisory: MEND:CVE-2015-1369...

Sitefinity Enterprise v7.2.53 - Persistent UI Vulnerability

Document Title: =============== Sitefinity Enterprise v7.2.53 - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1369 Release Date: ============= 2015-01-06 Vulnerability Laboratory ID VL-ID: ===================================...