Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Jamsea

#26621of 56,335
9.8Total CVSS
Vulnerabilities · 1
PT-2018-4729
9.8
2018-05-29
Sailjs · Waterline-Sequel · CVE-2016-10551
**Name of the Vulnerable Software and Affected Versions** waterline-sequel versions 0.50 **Description** The issue allows malicious users to input their own SQL statements, which can be executed and provide full access to the database. This occurs when user input is passed into the `like`, `contains`, `startsWith`, or `endsWith` methods in waterline-sequel. **Recommendations** Upgrade to at least version 0.5.1