Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Jamsea

#26621de 56,334
9.8CVSS total
Vulnerabilidades · 1
PT-2018-4729
9.8
2018-05-29
Sailjs · Waterline-Sequel · CVE-2016-10551
**Name of the Vulnerable Software and Affected Versions** waterline-sequel versions 0.50 **Description** The issue allows malicious users to input their own SQL statements, which can be executed and provide full access to the database. This occurs when user input is passed into the `like`, `contains`, `startsWith`, or `endsWith` methods in waterline-sequel. **Recommendations** Upgrade to at least version 0.5.1