5 matches found
GHSA-HQ8G-QQ57-5275 SQL Injection in untitled-model
All versions of untitled-model re vulnerable to SQL Injection. Query parameters are not properly sanitized allowing attackers to inject SQL statements and execute arbitrary SQL queries. Recommendation No fix is currently available. Consider using an alternative package until a fix is made availab...
untitled-js (>=1.0.0 <=1.0.9) potentially affected by unknown CVE via untitled-model (=1.0.5)
untitled-model NPM version =1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on untitled-model and may be impacted: - untitled-js =1.0.0, =1.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-HQ8G-QQ57-5275...
SQL Injection in untitled-model
All versions of untitled-model re vulnerable to SQL Injection. Query parameters are not properly sanitized allowing attackers to inject SQL statements and execute arbitrary SQL queries. Recommendation No fix is currently available. Consider using an alternative package until a fix is made availab...
SQL Injection
untitled-model is vulnerable to SQL injection. The attack exists because it does not sanitize the input provided by the user, allowing an attacker to inject and execute arbitrary SQL queries...
Node.js third-party modules: [untitled-model] sql injection
I would like to report VULNERABILITY in MODULE It allows DESCRIBE THE IMPACT OF THE VULNERABILITY - E.G READ ARBITRARY FILES, READ DATA FROM DATABASE ETC Module module name: untitled-model version: 1.0.5 npm page: https://www.npmjs.com/package/untitled-model Module Description Rapid sql query...