{"id":"CVE-2018-6330","details":"Laravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhx_user and dhx_version parameters.","modified":"2026-07-08T16:41:06.486810Z","published":"2019-03-28T16:29:00.487Z","references":[{"type":"ADVISORY","url":"https://github.com/laravel/framework/blob/5.4/CHANGELOG-5.4.md"},{"type":"EVIDENCE","url":"http://www.itblog.gbonanno.de/cve-2018-6330-laravel-sql-injection/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/laravel/framework","events":[{"introduced":"ecc6468b8af30b77566a8519ce8898740ef691d7"},{"last_affected":"ecc6468b8af30b77566a8519ce8898740ef691d7"}],"database_specific":{"cpe":"cpe:2.3:a:laravel:framework:5.4.15:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.4.15"},{"last_affected":"5.4.15"}],"source":"CPE_STRING"}}],"versions":["5.4.15","v5.4.15"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-6330.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}