← All advisories

High severity8.8OSV Advisory· Published Mar 28, 2019· Updated Jun 17, 2026

CVE-2018-6330

CVE-2018-6330

Description

Laravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhx_user and dhx_version parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Laravel/LaravelOSV2 versions
v4.0.0, v4.0.0-BETA2, v4.0.0-BETA3, …+ 1 more
- (no CPE)range: v4.0.0, v4.0.0-BETA2, v4.0.0-BETA3, …
- (no CPE)range: <5.4.15
Laravel/Framework
cpe:2.3:a:laravel:framework:5.4.15:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

www.itblog.gbonanno.de/cve-2018-6330-laravel-sql-injection/nvdExploitThird Party Advisory
github.com/laravel/framework/blob/5.4/CHANGELOG-5.4.mdnvdProductThird Party Advisory

News mentions

0

No linked articles in our index yet.