Description
PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
Remediation
References
Related Vulnerabilities
Elgg Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2021-3980)
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20411)
Oracle JRE CVE-2013-0424 Vulnerability (CVE-2013-0424)
WordPress Plugin YITH PayPal Express Checkout for WooCommerce Security Bypass (1.2.5)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2141)