VYPR

PDO_SQLite

by PHP

CVEs (1)

  • CVE-2022-31631CriFeb 12, 2025
    risk 0.59cvss 9.1epss 0.02

    In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection…