CVE-2015-9244

CVE-2015-9244

Vendor Hackerone

Product mysql node module

Weakness CWE-89 · SQLi

Published May 29, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

Key dates

02Disclosure timeline

May 29, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2015-9244 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2014-5399 Schneider Electric Wonderware SQL Injection CVE-2026-11488 code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection CVE-2024-2672 Campcodes Online Job Finder System controller.php sql injection CVE-2025-54119 ADOdb's sqlite3 driver allows SQL injection CVE-2025-6293 code-projects Hostel Management System contact_manager.php sql injection