Skip to content
OpenAdvisories

Package · Ubuntu

libsql-abstract-perl

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile

    SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile. The html profile wraps keywords and placeholders in span elements and breaks lines with br elements, so its output …