SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.CVE-2015-9244HackerOne · 2.4% likely

   CWE-89

2. sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before vers…CVE-2016-10554HackerOne · 1.8% likely

   CWE-89

3. sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS If user inpu…CVE-2016-10550HackerOne · 1.8% likely

   CWE-89

4. waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline's `like`, `contains`, `startsWith`, or `endsWith` will e…CVE-2016-10551HackerOne · 1.8% likely

   CWE-89

5. sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS In Postgres,…CVE-2016-10556HackerOne · 1.3% likely

   CWE-89

6. sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. A fix was p…CVE-2016-10553HackerOne · 1.2% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.