CVE-2019-9193

🗓️ 01 Apr 2019 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 1086 Views

CVE-2019-9193: PostgreSQL 9.3-11.2 allows execution of arbitrary code via "COPY TO/FROM PROGRAM"

Reporter	Title	Published	Views	Family All 38
0day.today	PostgreSQL COPY FROM PROGRAM Command Execution Exploit	7 May 201900:00	–	zdt
0day.today	PostgreSQL 9.3-11.7 - Remote Code Execution (Authenticated) Exploit	30 Mar 202200:00	–	zdt
0day.today	PostgreSQL 9.6.1 - Remote Code Execution (Authenticated) Exploit	5 Apr 202300:00	–	zdt
GithubExploit	Exploit for OS Command Injection in Postgresql	29 Mar 202221:02	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	6 Oct 202417:16	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	21 Jan 202602:08	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	1 Dec 202502:49	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	6 Oct 202417:16	–	githubexploit
GithubExploit	SQLi	21 Apr 202609:36	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2018-1058, CVE-2018-10936, CVE-2019-9193)	27 May 202008:42	–	ibm

NVD

Node

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/166540/PostgreSQL-11.7-Remote-Code-Execution.html
packetstormsecurity	www.packetstormsecurity.com/files/152757/PostgreSQL-COPY-FROM-PROGRAM-Command-Execution.html
security	www.security.netapp.com/advisory/ntap-20190502-0003/
packetstormsecurity	www.packetstormsecurity.com/files/171722/PostgreSQL-9.6.1-Remote-Code-Execution.html
medium	www.medium.com/greenwolf-security/authenticated-arbitrary-command-execution-on-postgresql-9-3-latest-cd18945914d5
trustwave	www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/authenticated-arbitrary-command-execution-on-postgresql-9-3/
paquier	www.paquier.xyz/postgresql-2/postgres-9-3-feature-highlight-copy-tofrom-program/
blog	www.blog.hagander.net/when-a-vulnerability-is-not-a-vulnerability-244/

21 Nov 2024 04:51Current

7.4High risk

Vulners AI Score7.4

CVSS 37.2

CVSS 29

EPSS0.93645

SSVC