제출 #555649: web.py 0.70 SQL Injection정보

제목web.py 0.70 SQL Injection
설명In the PostgresDB._process_insert_query method of web/db.py, the seqname parameter is not properly filtered or escaped.When using PostgreSQL database, attackers can inject arbitrary SQL commands by controlling the sequence name parameter
원천⚠️ https://noppgwz8if.feishu.cn/docx/TxjpddUpTokyBwxibSgcTRr7nUf
사용자
 Luaklein (UID 83974)
제출2025. 04. 10. AM 06:30 (1 년도 ago)
모더레이션2025. 04. 19. AM 01:50 (9 days later)
상태수락
VulDB 항목305724 [webpy web.py 0.70 web/db.py PostgresDB._process_insert_query seqname SQL 주입]
포인트들17

◂ 이전개요다음 ▸

Interested in the pricing of exploits?

See the underground prices here!