PT-2015-5244

Name of the Vulnerable Software and Affected Versions sequelize versions prior to 2.0.0-rc8 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the order parameter when user input is passed into it. This can be exploited by manipulating the order...