Laravel Framework SQL Injection Vulnerability

Laravel Framework is a PHP-based web application development framework by Taylor Otwell, an individual developer. Laravel Framework suffers from a SQL injection vulnerability that stems from a query binding exploit that causes the query builder to not return any results. The following products an...

PT-2021-14371 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 6.20.11 Laravel versions prior to 7.30.2 Laravel versions prior to 8.22.1 Description: The issue concerns a query binding exploitation in Laravel. If a request is crafted where a field that is normally a non-array...