CVE-2022-31631
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
Vendor
Product
CWE
Yayın Tarihi
2025-02-12 22:15:29
Güncelleme
2025-07-02 21:35:56
Source Identifier
security@php.net
KEV Date Added
-