3 matches found
POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0
Database Ghost š„ é«åŗ¦ćŖ PostgreSQL SQL ć¤ć³ćøć§ćÆć·ć§ć³ę»ęćć¼ć« šØ å č²¬äŗé čŖåÆćććć»ćć„ćŖćć£ćć¹ćå°ēØ äøę£ä½æēØćÆéę³ć§ććęęćć¦ććć·ć¹ćć ćć¾ććÆęē¤ŗēćŖćć¹ćčرåÆćå¾ćć·ć¹ćć ć§ć®ćæä½æēØćć¦ćć ććć ā” ćÆć¤ććÆć¹ćæć¼ć ć¤ć³ć¹ćć¼ć«ćØå®č” root@kitploit: git clone https://github.com/HeavyGhost-le/POCSQLinjectioninParseServerprior6.5.7-7.1.0.git cd...
CVE-2024-39309
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A vulnerability in versions prior to 6.5.7 and 7.1.0 allows SQL injection when Parse Server is configured to use the PostgreSQL database. The algorithm to detect SQL injection has been improved...
CVE-2024-39309
Parse Server (Node.js) prior to versions 6.5.7 and 7.1.0 is vulnerable to SQL injection when configured with PostgreSQL. The issue stems from how user input is handled in the PostgreSQL path, and the detection algorithm was improved in 6.5.7 and 7.1.0. Remediation is to upgrade to the fixed relea...