CVE-2016-10551 | BDVDB-2026-101216 Detail

Description#

waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline's `like`, `contains`, `startsWith`, or `endsWith` will end up in waterline-sequel with the potential for malicious code. A malicious user can input their own SQL statements in waterline-sequel 0.50 that will get executed and have full access to the database.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-05-29Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.