CVE-2022-31631
EUVD-2022-5422512.02.2025, 22:15
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| php | php | 8.0.0 ≤ 𝑥 < 8.0.27 |
| php | php | 8.1.0 ≤ 𝑥 < 8.1.15 |
| php | php | 8.2.0 ≤ 𝑥 < 8.2.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| php5 |
| ||||||||||||||||||
| php7.0 |
| ||||||||||||||||||
| php7.2 |
| ||||||||||||||||||
| php7.4 |
| ||||||||||||||||||
| php8.1 |
|