Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-7269
HistoryMar 21, 2018 - 6:29 p.m.

Sql injection

2018-03-2118:29:00
PRIOn knowledge base
www.prio-n.com
3

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.5%

The findByCondition function in framework/db/ActiveRecord.php in Yii 2.x before 2.0.15 allows remote attackers to conduct SQL injection attacks via a findOne() or findAll() call, unless a developer recognizes an undocumented need to sanitize array input.

CPENameOperatorVersion
yiige2.0.0
yiilt2.0.15

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.5%

Related for PRION:CVE-2018-7269