Description
Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields.
References
- 3319 vdb-entry
- postgresql-pam-authentication-module(7110) vdb-entry