Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
greensql_firewall SQL注入漏洞
Vulnerability Description
GreenSQL Firewall(greensql-fw)是开源的数据库防火墙程序，用来保护开源的数据库系统MYSQL和PostgreSQL免遭SQL injection攻击。 GreenSQL Firewall(greensql-fw)，可能是0.9.2或0.9.4之前的版本，允许远程攻击者借助一个包含"x=y=z"这类表达的WHERE从句，绕过SQL注入保护机制。该漏洞已被MySQL成功解析。
CVSS Information
N/A
Vulnerability Type
N/A