newsObject Relational Membrane - News: PostgreSQL SQL injection vulnerability

 
 
Latest News
PostgreSQL SQL injection vulnerability posted by diedrich, Wed May 24 08:12:42 2006 - 0 replies
Completed MySQL Adapter posted by diedrich, Thu May 4 12:09:07 2006 - 0 replies
Freshmeat announcement posted by diedrich, Fri Apr 28 10:29:53 2006 - 0 replies
[Submit News]
[3 news in archive]

PostgreSQL SQL injection vulnerability

Item posted by Diedrich Vorberg <diedrich> on Wed May 24 08:12:42 2006.

This vulnerability is not so much a fault of Postgres, but one of PHP's addslashes(), which will convert certain Unicode sequences to quotes, allowing to add arbitrary SQL to a Web-Request. It seems, orm2's quoting functions, which are based on string.replace(), are too primitive to be fooled by this. Also they operate on Python single byte strings only, which makes sure we're on the save side.

Cheers Diedrich

Comments:

No messages in PostgreSQL SQL injection vulnerability

 

Back to the top


Powered by Savane 3.1-cleanup1