Product · HackerOne

mysql node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium —

CVE-2015-9244

SQL Injection in mysql

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

HackerOne mysql node module mysql node-mysql Debian npm

May 29, 2018