SQL Injection
The proxystatistics module for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php.
Advisories for Composer/Cesnet/Simplesamlphp-Module-Proxystatistics package
2019
The proxystatistics module for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php.