CVE-2018-16850

A SQL Injection flaw has been discovered in PostgreSQL server in the way triggers that enable transition relations are dumped. The transition relation name is not correctly quoted and it may allow an attacker with CREATE privilege on some non-temporary schema or TRIGGER privilege on some table to...

SQL Injection

PostgreSQL is vulnerable to SQL injection. An attacker is able to inject and execute arbitrary SQL statements in pgupgrade and pgdump via a malicious trigger definition CREATE TRGGER ... REFERENCING...