critical9.1
CVE-2022-31631
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying…
Impact
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | from 8.0.0 before 8.0.27 from 8.1.0 before 8.1.15 from 8.2.0 before 8.2.2 |