CVE-2015-1369

SQL injection vulnerability in Sequelize before 2.0.0-rc7 for Node.js allows remote attackers to execute arbitrary SQL commands via the order parameter.

🔗 References (6)

• secalert@redhathttp://www.openwall.com/lists/oss-security/2015/01/23/2
• secalert@redhathttps://github.com/sequelize/sequelize/pull/2919
• secalert@redhathttps://nodesecurity.io/advisories/sequelize-sql-injection-order
• af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2015/01/23/2
• af854a3a-2127-422b-91ae-364da2661108https://github.com/sequelize/sequelize/pull/2919
• af854a3a-2127-422b-91ae-364da2661108https://nodesecurity.io/advisories/sequelize-sql-injection-order