Skip to content
OpenAdvisories

Package · Debian

libpgjava

13 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 10.0

    pgjdbc SQL Injection via line comment generation

    pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There mu…