The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program.
Software | From | Fixed in |
---|---|---|
umut_gokbayrak / postaci | 1.1.2 | 1.1.2.x |
umut_gokbayrak / postaci | 1.1.3 | 1.1.3.x |