Vulnerabilities (CVE)

Filtered by vendor Guiseppe Tanzilli And Matthias Eckermann Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-3656 1 Guiseppe Tanzilli And Matthias Eckermann 1 Mod Auth Pgsql 2023-12-10 10.0 HIGH N/A
Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.
CVE-2001-1379 1 Guiseppe Tanzilli And Matthias Eckermann 1 Mod Auth Pgsql 2023-12-10 7.5 HIGH N/A
The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.