Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote attackers to conduct SQL injection attacks via a \ (backslash) in a message. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4422.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-05-14T14:00:00

Updated: 2024-08-06T05:47:57.675Z

Reserved: 2015-04-27T00:00:00

Link: CVE-2015-3427

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-05-14T14:59:11.140

Modified: 2016-12-06T03:00:54.720

Link: CVE-2015-3427

cve-icon Redhat

No data.