NetSight
high7.5

CVE-2001-0201

The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries…

Impact

The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program.

Affected products

VendorProductAffected versions
Umut GokbayrakPostaci
Versions 1.1.2, 1.1.3

References