Object Relational Membrane - News: PostgreSQL SQL injection vulnerability
Latest News
PostgreSQL SQL injection vulnerability posted by diedrich, Wed 24 May 2006 08:12:42 AM UTC
Completed MySQL Adapter posted by diedrich, Thu 04 May 2006 12:09:07 PM UTC
Freshmeat announcement posted by diedrich, Fri 28 Apr 2006 10:29:53 AM UTC
PostgreSQL SQL injection vulnerability
Item posted by Diedrich Vorberg <diedrich> on Wed 24 May 2006 08:12:42 AM UTC.
This vulnerability is not so much a fault of Postgres, but one of PHP's addslashes(), which will convert certain Unicode sequences to quotes, allowing to add arbitrary SQL to a Web-Request. It seems, orm2's quoting functions, which are based on string.replace(), are too primitive to be fooled by this. Also they operate on Python single byte strings only, which makes sure we're on the save side.
Cheers Diedrich
Powered by Savane 3.13-f8d8.
Corresponding source code