3 matches found
php: ext-pgsql: PHP: SQL injection via improper backslash escaping
A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...
e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout
CVE-2026-17543 — SQL Injection in PHP ext/pgsql tramite E'...' Backslash Breakout Proof of concept per CVE-2026-17543 CVSS 9.8 Critical, CWE-89, una vulnerabilità di SQL injection nell'estensione procedurale PostgreSQL di PHP. Riepilogo della vulnerabilità pginsert, pgselect, pgupdate, pgdelete e...
