CVE-2006-2313
CVE-2006-2313
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
Produtos afetados
n/a · n/aQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.aschttp://archives.postgresql.org/pgsql-announce/2006-05/msg00010.phphttp://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.htmlhttp://secunia.com/advisories/20231http://secunia.com/advisories/20232http://secunia.com/advisories/20314http://secunia.com/advisories/20435http://secunia.com/advisories/20451http://secunia.com/advisories/20503http://secunia.com/advisories/20555http://secunia.com/advisories/20653http://secunia.com/advisories/20782