Description
SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter.
Remediation
References
Related Vulnerabilities
Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2019-16891)
Drupal Core 4.7.x Denial of Service (4.7.0 - 4.7.4)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3837)
Oracle JRE CVE-2022-21248 Vulnerability (CVE-2022-21248)
WordPress Plugin Wrapper Link Elementor Malicious Code (1.0.3)