Lucene search

K
osvGoogleOSV:GHSA-HHG2-G6H6-C266
HistoryMay 24, 2022 - 4:59 p.m.

Yii SQL injection vulnerability

2022-05-2416:59:28
Google
osv.dev
12

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.5%

The findByCondition function in framework/db/ActiveRecord.php in Yii 2.x before 2.0.15 allows remote attackers to conduct SQL injection attacks via a findOne() or findAll() call, unless a developer recognizes an undocumented need to sanitize array input.

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.5%

Related for OSV:GHSA-HHG2-G6H6-C266