← volver
CVE-2006-2313

CVE-2006-2313

EPSS 2.8%
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.aschttp://archives.postgresql.org/pgsql-announce/2006-05/msg00010.phphttp://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.htmlhttp://secunia.com/advisories/20231http://secunia.com/advisories/20232http://secunia.com/advisories/20314http://secunia.com/advisories/20435http://secunia.com/advisories/20451http://secunia.com/advisories/20503http://secunia.com/advisories/20555http://secunia.com/advisories/20653http://secunia.com/advisories/20782