Vendor
drogonframework
2 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
High 7.3
drogonframework drogon ORM Criteria.cc makeCriteria sql injection
A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library orm_lib/src/Criteria.cc of the component ORM. Executing a manipulation of the argument filter can lead to sql injection. The attack may be perf…
-
High 7.3
drogonframework drogon ORM Mapper Mapper.h orderBy sql injection
A vulnerability was detected in drogonframework drogon up to 1.9.13. Affected by this issue is the function Mapper::orderBy in the library Mapper.h of the component ORM Mapper. Performing a manipulation of the argument sort results in sql injection. The attac…