CVE-2015-10084

CVE-2015-10084 affects irontec klear-library chloe. The vulnerability stems from the _prepareWhere function in Controller/Rest/BaseController.php, enabling SQL injection. Versions prior to marla are affected; upgrading to marla addresses the issue. A patch is identified as b25262de52fdaffde2a4434...