CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2019/08/26 11:15 p.m.•15 views

CVE-2019-15658

connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data...

7.5CVSS7.7AI score0.00981EPSS

Exploits0References1

OSV•added 2019/08/26 11:15 p.m.•13 views

CVE-2019-15658

connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data...

7.3CVSS8.3AI score

Exploits0References1

CVE•added 2019/08/26 10:55 p.m.•136 views

CVE-2019-15658

The CVE-2019-15658 entry concerns the npm package connect-pg-simple (PostgreSQL session store). Affected versions prior to 6.0.1 are vulnerable to SQL injection when tableName or schemaName are untrusted inputs. The root cause is in PGStore.prototype.quotedTable, which uses those variables to bui...

7.5CVSS7.5AI score0.00981EPSS

Exploits0References1Affected Software1