Skip to content
OpenAdvisories

Archive

6 October 2012

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High —

    Unescaped parameters in the PostgreSQL JDBC driver

    Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default configuration of PostgreSQL 9.1, does not properly escape unspecified JDBC statement para…

  • High —

    ImpressPages CMS eval injection vulnerability

    Eval injection vulnerability in ip_cms/modules/standard/content_management/actions.php in ImpressPages CMS 1.0.12 and possibly other versons before 1.0.13 allows remote attackers to execute arbitrary code via the cm_group parameter.