POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0

Database Ghost 🔥 Strumento avanzato per lo sfruttamento di iniezioni SQL in PostgreSQL 🚨 AVVERTENZA SOLO PER TEST DI SICUREZZA AUTORIZZATI L'uso non autorizzato è illegale. Utilizza solo su sistemi di tua proprietà o per i quali hai esplicito permesso di test. ⚡ AVVIO RAPIDO Installa ed esegui gi...

CVE-2024-39309

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A vulnerability in versions prior to 6.5.7 and 7.1.0 allows SQL injection when Parse Server is configured to use the PostgreSQL database. The algorithm to detect SQL injection has been improved...

CVE-2024-39309

Parse Server (Node.js) prior to versions 6.5.7 and 7.1.0 is vulnerable to SQL injection when configured with PostgreSQL. The issue stems from how user input is handled in the PostgreSQL path, and the detection algorithm was improved in 6.5.7 and 7.1.0. Remediation is to upgrade to the fixed relea...