Skip to content
OpenAdvisories
Critical · 9.8 CVE-2019-10766 EUVD-2019-0732GHSA-68wg-qv6r-j4vpSNYK-PHP-USMANHALALITPIXIE-534879

SQL Injection in usmanhalalit/pixie

Published Nov 19, 2019 · Updated Aug 4, 2024 · Assigned by snyk

Package: usmanhalalit/pixie Ecosystem: Packagist

Description

Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit() function due to improper sanitization.

Affected products

VendorProductAffectedFixed
— Pixie Query Builder 1.0.x before 1.0.3, and 2.0.x before 2.0.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist usmanhalalit/pixie < 1.0.3 1.0.3 GHSA-68wg-qv6r-j4vp
Packagist usmanhalalit/pixie >= 2.0.0, < 2.0.2 2.0.2 GHSA-68wg-qv6r-j4vp

References