SQL Injection in Utils.php getVersion with POC and fix in 5.2.2

Vulnerability Overview Vulnerability Type: SQL Injection Vulnerability Description: In the function in , the variable is concatenated directly into the SQL query statement without any filtering, allowing an attacker to execute arbitrary SQL statements by constructing a special version string. Scope of Impact Affected File: Affected Function: Affected Versions: Fix Details Fixed Version: Fix Method**: The variable is filtered to prevent SQL injection. POC Code ```php // Vulnerable code public static function getVersion($version) { $version = explode(" ", $version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version = array_shift($version); $version

Goal Reached Thanks to every supporter — we hit 100%!

SQL Injection in Utils.php getVersion with POC and fix in 5.2.2

More from this source