The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.
References
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2009-10-22 16:30
Updated : 2024-02-28 11:21
NVD link : CVE-2009-2940
Mitre link : CVE-2009-2940
CVE.ORG link : CVE-2009-2940
JSON object : View
Products Affected
python
- python
pygresql
- pygresql
CWE