Description
The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-01/0287.htmlExploit, Vendor Advisory
- http://www.securityfocus.com/bid/2230Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5972
- http://archives.neohapsis.com/archives/bugtraq/2001-01/0287.htmlExploit, Vendor Advisory
- http://www.securityfocus.com/bid/2230Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5972
Timeline
- Published
- Mar 26, 2001
- Last modified
- Jun 16, 2026
- NVD status
- Modified