Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-3427
HistoryMay 14, 2015 - 2:59 p.m.

Sql injection

2015-05-1414:59:00
PRIOn knowledge base
www.prio-n.com
1

7.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.4%

Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote attackers to conduct SQL injection attacks via a \ (backslash) in a message. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4422.

CPENameOperatorVersion
debian_linuxeq8.0
quasselle0.12.1

7.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.4%