POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0

Database Ghost 🔥 Herramienta avanzada de explotación de inyección SQL en PostgreSQL 🚨 AVISO LEGAL SOLO PARA PRUEBAS DE SEGURIDAD AUTORIZADAS El uso no autorizado es ilegal. Utilícelo únicamente en sistemas de su propiedad o para los que tenga permiso explícito de realizar pruebas. ⚡ INICIO RÁPIDO...

CVE-2024-39309

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A vulnerability in versions prior to 6.5.7 and 7.1.0 allows SQL injection when Parse Server is configured to use the PostgreSQL database. The algorithm to detect SQL injection has been improved...

CVE-2024-39309

Parse Server (Node.js) prior to versions 6.5.7 and 7.1.0 is vulnerable to SQL injection when configured with PostgreSQL. The issue stems from how user input is handled in the PostgreSQL path, and the detection algorithm was improved in 6.5.7 and 7.1.0. Remediation is to upgrade to the fixed relea...