6 matches found
e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout
CVE-2026-17543 — PHP ext/pgsql における E'...' バックスラッシュ突破によるSQLインジェクション CVE-2026-17543 （CVSS 9.8 Critical、CWE-89）の概念実証コードです。これは、PHP の手続き型 PostgreSQL 拡張機能における SQL インジェクション脆弱性です。 脆弱性の概要 pginsert、pgselect、pgupdate、pgdelete、pgconvert はすべて、文字列値を phppgsqlconvert 経由で処理します。この関数は次の処理を行います： 1. エスケープ ：libpq の...
php: ext-pgsql: PHP: SQL injection via improper backslash escaping
A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...
php: ext-pgsql: PHP: SQL injection via improper backslash escaping
A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...
php: ext-pgsql: PHP: SQL injection via improper backslash escaping
A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...
php: ext-pgsql: PHP: SQL injection via improper backslash escaping
A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...
