CVE-2017-16082

CVE-2017-16082 概述 受影响版本的 pg 存在一个远程代码执行漏洞，当远程数据库或查询指定了精心构造的列名时触发。 以下两种场景下应用程序容易受到攻击： 1. 应用程序执行不安全的、用户提供的 SQL，其中包含恶意的列名。 2. 应用程序连接到不受信任的数据库并执行查询，返回的结果包含恶意的列名。 概念验证 root@kitploit: const Client = require'pg' const client = new Client client.connect const sql = SELECT 1 AS "\'/", 2 AS "\'/\n +...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection through the column.go processing in the PostgreSQL and MySQL table schema components. An attacker can tamper with the database table structure and potentially leak data by creating a malicious Table CRD with crafted column...

DEBIAN-CVE-2017-16082

A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1 Executing unsafe, user-supplied sql which contains a malicious column name. 2...