| Package | Affected versions | Patched versions |
|---|---|---|
| auth2db | = 0.1.0= 0.1.2= 0.1.3= 0.1.4= 0.1.5= 0.1.6= 0.1.7= 0.1.8= 0.1.9= 0.2.0= 0.2.1= 0.2.2= 0.2.3= 0.2.4= 0.2.5= 0.2.6 |
SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free