CVE-2019-9193 PoC — PostgreSQL 操作系统命令注入漏洞

Source

https://github.com/chromanite/CVE-2019-9193-PostgreSQL-9.3-11.7

Associated Vulnerability

Title:PostgreSQL 操作系统命令注入漏洞 (CVE-2019-9193)
Description:PostgreSQL是PostgreSQL组织的一套自由的对象关系型数据库管理系统。该系统支持大部分SQL标准并且提供了许多其他特性，例如外键、触发器、视图等。 PostgreSQL 9.3至11.2版本中的导入导出数据命令‘COPY TO/FROM PROGRAM’存在操作系统命令注入漏洞。攻击者可利用该漏洞获取数据库超级用户权限，从而执行任意系统命令。

Description

PostgreSQL 9.3-11.7 - Remote Code Execution (RCE)

File Snapshot


 [4.0K]  /data/pocs/4b94d7eb4bf608ba0ad34c8e921661364059b479
└── [4.0K]  cve-2019–9193.py

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!