CVE-2018-3754

Published: 03/07/2018 Updated: 04/09/2018

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Node.js third-party module query-mysql versions 0.0.0, 0.0.1, and 0.0.2 are vulnerable to an SQL injection vulnerability due to lack of user input sanitization. This may allow an malicious user to run arbitrary SQL queries when fetching data from database.

Vulnerable Product	Search on Vulmon	Subscribe to Product
query-mysql project query-mysql 0.0.1
query-mysql project query-mysql 0.0.2
query-mysql project query-mysql 0.0.0

Course project for SDU Security

SQL injection Security in Computer Systems project - SQL injection vulnerability 📝 Table of Contents Problem Statement Idea / Solution Future Scope Setting up a local environment Usage Technology Stack Authors Acknowledgments 🧐 Problem Statement It is useful to design and follow a specific format when writing a problem statement While there are several

CWE-89 https://hackerone.com/reports/311244 https://nvd.nist.gov https://github.com/314ga/SecurityCourse-SQLInjection

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-3754

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect