Sqlalchemy

Sqlalchemy

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2019-7164

Exploit
  • EPSS 1.98%
  • Published 20.02.2019 00:29:00
  • Last modified 21.11.2024 04:47:41

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.

7.8

CVE-2019-7548

Exploit
  • EPSS 1.11%
  • Published 06.02.2019 21:29:01
  • Last modified 21.11.2024 04:48:18

SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.

7.5

CVE-2012-0805

Exploit
  • EPSS 1.65%
  • Published 05.06.2012 22:55:08
  • Last modified 11.04.2025 00:51:21

Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) selec...