Skip to content
OpenAdvisories

Product · dresende

node-sql-query

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.3

    dresende node-sql-query Request Parameter Select.js SelectQuery.build sql injection

    A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/SelectQuery.build in the library lib/Select.js of the component Request Parameter Handler. Performing a manipulat…