Lucene search
Veracode Vulnerability DatabaseVERACODE:38533HistoryDec 20, 2022 - 4:42 a.m.
SQL Injection
2022-12-2004:42:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
laravel
jqgrid
sql injection
eloquentrepositoryabstract
database security
0.002 Low
EPSS
Percentile
54.2%
mgallegos/laravel-jqgrid is vulnerable to SQL injection. The vulnerability exists in the getRows function in EloquentRepositoryAbstract.php because the library directly passes the values added at the end of query sorting to the database, allowing a malicious user to inject and execute arbitrary SQL queries on the system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mgallegos/laravel-jqgrid | le | v1.3.0 | |
| mgallegos/laravel-jqgrid | le | v1.3.0 |
Related
osv
osv
laravel-jqgrid vulnerable to SQL Injection
2022-12-19 15:30:29
CVE-2021-4262
2022-12-19 14:15:10
cve
cve
CVE-2021-4262
2022-12-19 14:15:10
prion
prion
Sql injection
2022-12-19 14:15:00
nvd
nvd
CVE-2021-4262
2022-12-19 14:15:10
cvelist
cvelist
github
github
laravel-jqgrid vulnerable to SQL Injection
2022-12-19 15:30:29