PT-2026-36492
CVE-2026-42475
·
Published
2026-05-01
·
Updated
2026-07-08
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
MixPHP Framework versions 2.x through 2.2.17
Description
SQL injection allows an attacker to interfere with the queries that an application makes to its database. This issue occurs via a crafted
on array passed to the joinOn() function within BuildHelper.php.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾