Description
SQL injection vulnerability in the LTree converter in Pomm before 1.1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- 56986 third-party-advisory
- pomm-ltree-sql-injection(91276) vdb-entry
- 65711 vdb-entry
- https://github.com/chanmix51/Pomm/issues/122
- http://www.pomm-project.org/news/pomm-1-1-5-is-out.html