CVE-2022-31631

score

<0.1

cvss

9.1

epss

2.2%

published

2025-02-12

kev added

—

first seen

2026-10-21

PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 contain a SQL injection caused by incorrect quoting in PDO::quote() when used with SQLite, letting attackers inject malicious SQL, exploit requires supplying an overly long string.