Description
SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors.
References
- GLSA-200608-10 vendor-advisory
- 20494 third-party-advisory
- 19367 vdb-entry
- USN-367-1 vendor-advisory
- 21362 third-party-advisory
- 22481 third-party-advisory
- ADV-2006-2209 vdb-entry
- pike-sql-injection(26992) vdb-entry
- http://pike.ida.liu.se/download/notes/7.6.86.xml