irontec klear-library chloe SQL注入漏洞

klear-library is a Zend Framework 1 public site external library open source by Irontec. Irontec klear-library chloe has a SQL injection vulnerability , the vulnerability stems from the file Controller/Rest/BaseController.php function prepareWhere has a problem , which will lead to sql injection...

PT-2023-10263 · Irontec · Irontec Klear-Library

Name of the Vulnerable Software and Affected Versions: irontec klear-library chloe versions prior to marla Description: A critical issue was found in the prepareWhere function of the Controller/Rest/BaseController.php file, leading to sql injection. Recommendations: For versions prior to marla,...