Threats affecting pkg:cpan/SQL-Abstract

SQL::Abstract versions from 1.90_01 up to but not including 2.000001_04 for Perl contain a SQL injection vulnerability. The injection_guard check intended to prevent injection is bypassed when function names are passed explicitly with the -func parameter, allowing untrusted input to be used unchecked in SQL queries. This can lead to SQL injection if an application relies on injection_guard to validate function names passed this way. The issue is fixed in version 2.000001_04.

SQL::Abstract::Tree versions before 2.000001_04 for Perl contain a cross-site scripting (XSS) vulnerability in the html profile. The html profile outputs SQL text and bind values wrapped in HTML elements without escaping, allowing injection of malicious JavaScript if attacker-controlled input is rendered in a web page, such as a debug panel or query log. This vulnerability is fixed in version 2.000001_04.

SQL::Abstract versions from 1.90_01 up to but not including 2.000001_04 for Perl contain a SQL injection vulnerability. This occurs when nested statements used as identifiers improperly handle where clause values, inserting them directly into SQL text without proper escaping unless quote_char is set. Applications passing untrusted input in these contexts may be vulnerable to SQL injection attacks.