Vulnerability Details CVE-2022-31631
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.8%
CVSS Severity
CVSS v3 Score 9.1
Products affected by CVE-2022-31631
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
cpe:2.3:a:sqlite:sqlite:3.39.2
-
cpe:2.3:a:sqlite:sqlite:3.39.3
-
cpe:2.3:a:sqlite:sqlite:3.39.4
-
cpe:2.3:a:sqlite:sqlite:3.40.0
-
cpe:2.3:a:sqlite:sqlite:3.40.1
-
cpe:2.3:a:sqlite:sqlite:3.41.0
-
cpe:2.3:a:sqlite:sqlite:3.41.1
-
cpe:2.3:a:sqlite:sqlite:3.41.2
-
cpe:2.3:a:sqlite:sqlite:3.42.0
-
cpe:2.3:a:sqlite:sqlite:3.43.0
-
cpe:2.3:a:sqlite:sqlite:3.43.1
-
cpe:2.3:a:sqlite:sqlite:3.43.2
-
cpe:2.3:a:sqlite:sqlite:3.44.0
-
cpe:2.3:a:sqlite:sqlite:3.44.1
-
cpe:2.3:a:sqlite:sqlite:3.44.2
-
cpe:2.3:a:sqlite:sqlite:3.44.3
-
cpe:2.3:a:sqlite:sqlite:3.45.0
-
cpe:2.3:a:sqlite:sqlite:3.45.1
-
cpe:2.3:a:sqlite:sqlite:3.45.2
-
cpe:2.3:a:sqlite:sqlite:3.45.3
-
cpe:2.3:a:sqlite:sqlite:3.46.0
-
cpe:2.3:a:sqlite:sqlite:3.46.1
-
cpe:2.3:a:sqlite:sqlite:3.47.0
-
cpe:2.3:a:sqlite:sqlite:3.47.1
-
cpe:2.3:a:sqlite:sqlite:3.47.2
-
cpe:2.3:a:sqlite:sqlite:3.48.0
-
cpe:2.3:a:sqlite:sqlite:3.49.0
-
cpe:2.3:a:sqlite:sqlite:3.49.1
-
cpe:2.3:a:sqlite:sqlite:3.49.2
-
cpe:2.3:a:sqlite:sqlite:3.50.0
-
cpe:2.3:a:sqlite:sqlite:3.50.1
-
cpe:2.3:a:sqlite:sqlite:3.50.2
-
cpe:2.3:a:sqlite:sqlite:3.50.3