Details
-
Type:
Bug
-
Status: Open
-
Priority:
Minor
-
Resolution: Unresolved
-
Affects Version/s: 4.7.21-2.2.3
-
Fix Version/s: None
-
Labels:None
-
Versioning Impact:Patch (backwards-compatible bug fixes)
-
Documentation Required?:None
-
Verified?:No
Description
https://civicrm.stackexchange.com/questions/23084/db-error-when-using-civivolunteer-search
When a "With" (organization) parameter is supplied to the search, with other parameters, the API generates an invalid SQL query.
This has not been reliably re-produced.
Error is generated in BAO_Project::retrieve().
That code does look potentially vulnerable to ambiguous ID parameters.