-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nette/database | composer | <= 3.2.4 |
PHPPHPOngoing coverage of React2Shell
Miggo AIRoot Cause AnalysisThe original advisory specifically mentions SQL injection via untrusted filters passed to the where method. Nette Database's Selection::where() method is designed to accept array arguments for WHERE clause construction, but improper handling of raw string inputs (instead of using parameterized expressions) could enable injection. The medium confidence reflects the advisory's withdrawn status and lack of patch details, but the described attack vector aligns with common ORM injection patterns in query builder methods.