This host is installed with PostgreSQL with JDBC Driver and is prone to sql injection vulnerability.

Successful exploitation could allow attackers to manipulate SQL queries by injecting arbitrary SQL code and gain sensitive information. Impact Level: Application

Upgrade to PostgreSQL JDBC Driver versions 8.2 or later, For updates refer to http://jdbc.postgresql.org/download.html

An error exists within the JDBC driver which fails to escape unspecified JDBC statement parameters.

PostgreSQL JDBC Driver versions 8.1 on Windows

• http://archives.neohapsis.com/archives/bugtraq/2012-03/0126.html
• http://packetstormsecurity.com/files/111239/PostgreSQL-JDBC-Driver-8.1-SQL-Injection.html
• http://seclists.org/bugtraq/2012/Mar/125
• http://www.osvdb.org/80641
• https://bugzilla.novell.com/show_bug.cgi?id=754273

---

Updated on 2015-03-25