Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.
CVSS Information
N/A
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Postgresql PostgreSQL SQL注入漏洞
Vulnerability Description
PostgreSQL是PostgreSQL组织的一套自由的对象关系型数据库管理系统。该系统支持大部分SQL标准并且提供了许多其他特性，例如外键、触发器、视图等。 PostgreSQL中存在SQL注入漏洞。攻击者可利用该漏洞执行任意的SQL语句。以下产品及版本受到影响：PostgreSQL 9.4.24之前的9.4.x版本，9.5.19之前的9.5.x版本，9.6.15之前的9.6.x版本，10.10之前的10.x版本，11.5之前的11.x版本。
CVSS Information
N/A
Vulnerability Type
N/A