GHSA-gq63-p39p-jrjf
Withdrawn: SQL injection in Yii 2
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | yiisoft/yii2 | < 2.0.47 | 2.0.47 |
Details
As written in the advisory (Markdown source, shown as plain text).
## Withdrawn Advisory
This advisory has been withdrawn because the issue originates from a product built on Yii2, not the Yii2 Framework itself. This link is maintained to preserve external references.
## Original Description
SQL injection vulnerability found in Yii Framework Yii 2 Framework before v.2.0.47 allows the a remote attacker to execute arbitrary code via the runAction function.
References
External links from the advisory. They lead to third-party sites.