← Back

Query Mysql

query-mysql

Vendor: Query Mysql Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-3754
1Query Mysql Project
1Query Mysql
Nov 21, 2024
Jul 3, 2018
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Node.js third-party module query-mysql versions 0.0.0, 0.0.1, and 0.0.2 are vulnerable to an SQL injection vulnerability due to lack of user input sanitization. This may allow an attacker to run arbitrary SQL queries whe...Show more
Node.js third-party module query-mysql versions 0.0.0, 0.0.1, and 0.0.2 are vulnerable to an SQL injection vulnerability due to lack of user input sanitization. This may allow an attacker to run arbitrary SQL queries when fetching data from database.Show less