| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 3.5.0-rc1, < 3.5.6≥ 3.6.0-rc1, < 3.6.3≥ 4.0.0-rc1, < 4.0.1 | 3.5.63.6.34.0.1 |
When performing a fulltext search in SilverStripe 4.0.0 the 'start' querystring parameter is never escaped safely. This exposes a possible SQL injection vulnerability.
The issue exists in 3.5 and 3.6 but is less vulnerable, as SearchForm sanitises these variables prior to passing to mysql.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free