SQL injection vulnerabilities in the (1) PostgreSQL or (2) MySQL authentication modules for teapop 0.3.5 and earlier allow attackers to execute arbitrary SQL and possibly gain privileges.
| Software | From | Fixed in |
|---|---|---|
| teapop / teapop | 0.3.4 | 0.3.4.x |
| teapop / teapop | 0.3.5 | 0.3.5.x |