Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PostgreSQL Other Vulnerability - CVE-2012-1618 - Vulnerability Database
PostgreSQL

PostgreSQL Other Vulnerability - CVE-2012-1618

High
Reference: CVE-2012-1618
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-1618
Title: PostgreSQL Other Vulnerability
Overview:

Interaction error in the PostgreSQL JDBC driver before 8.2 when used with a PostgreSQL server with the quotstandard_conforming_stringsquot option enabled such as the default configuration of PostgreSQL 9.1 does not properly escape unspecified JDBC statement parameters which allows remote attackers to perform SQL injection attacks. NOTE: as of 20120330 it was claimed that the upstream developer planned to dispute this issue but an official dispute has not been posted as of 20121005.