The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00374
Percentile: 0.58267

CVSS Scoring

Affected Products

• cpe:2.3:a:postgresql:postgresql:6.5.0:*:*:*:*:*:*:*

← Back to Home