critical9.8
CVE-2019-15537
SQL Injection in SimpleSAMLphp
Impact
The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | cesnet/simplesamlphp-module-proxystatistics | < 3.1.0 | 3.1.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cesnet | Proxystatistics | before 3.1.0 |