Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2015-9244

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2015-9244
  • Mysqljs » Mysql » Version: 0.1.0
    cpe:2.3:a:mysqljs:mysql:0.1.0
  • Mysqljs » Mysql » Version: 0.2.0
    cpe:2.3:a:mysqljs:mysql:0.2.0
  • Mysqljs » Mysql » Version: 0.3.0
    cpe:2.3:a:mysqljs:mysql:0.3.0
  • Mysqljs » Mysql » Version: 0.4.0
    cpe:2.3:a:mysqljs:mysql:0.4.0
  • Mysqljs » Mysql » Version: 0.5.0
    cpe:2.3:a:mysqljs:mysql:0.5.0
  • Mysqljs » Mysql » Version: 0.6.0
    cpe:2.3:a:mysqljs:mysql:0.6.0
  • Mysqljs » Mysql » Version: 0.7.0
    cpe:2.3:a:mysqljs:mysql:0.7.0
  • Mysqljs » Mysql » Version: 0.8.0
    cpe:2.3:a:mysqljs:mysql:0.8.0
  • Mysqljs » Mysql » Version: 0.9.0
    cpe:2.3:a:mysqljs:mysql:0.9.0
  • Mysqljs » Mysql » Version: 0.9.1
    cpe:2.3:a:mysqljs:mysql:0.9.1
  • Mysqljs » Mysql » Version: 0.9.2
    cpe:2.3:a:mysqljs:mysql:0.9.2
  • Mysqljs » Mysql » Version: 0.9.3
    cpe:2.3:a:mysqljs:mysql:0.9.3
  • Mysqljs » Mysql » Version: 0.9.4
    cpe:2.3:a:mysqljs:mysql:0.9.4
  • Mysqljs » Mysql » Version: 0.9.5
    cpe:2.3:a:mysqljs:mysql:0.9.5
  • Mysqljs » Mysql » Version: 0.9.6
    cpe:2.3:a:mysqljs:mysql:0.9.6
  • Mysqljs » Mysql » Version: 2.0.0
    cpe:2.3:a:mysqljs:mysql:2.0.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved