libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
| Software | From | Fixed in |
|---|---|---|
| alessandro_gardich / nss_postgresql | 0.6.1 | 0.6.1.x |
| joerg_wendland / libnss-pgsql | 0.9.0 | 0.9.0.x |