ID de Prueba:	1.3.6.1.4.1.25623.1.0.150444
Categoría:	Policy
Título:	GaussDB Kernel: Configuring the Backslash Quote Usage
Resumen:	backslash_quote specifies whether a single quotation mark (') in a string can be;replaced by a backslash quote (\'). The backslash-quote (\') is accepted in;PostgreSQL due to historical reasons. However, this may bring security risks, such;as SQL injection attacks. To prevent such risks, you are advised to set;backslash_quote to deny queries containing the backslash-quote. In addition, you;are advised to use SQL standard method in which a single quotation mark (') is;Repeated ('').
Descripción:	Summary: backslash_quote specifies whether a single quotation mark (') in a string can be replaced by a backslash quote (\'). The backslash-quote (\') is accepted in PostgreSQL due to historical reasons. However, this may bring security risks, such as SQL injection attacks. To prevent such risks, you are advised to set backslash_quote to deny queries containing the backslash-quote. In addition, you are advised to use SQL standard method in which a single quotation mark (') is Repeated (''). CVSS Score: 0.0 CVSS Vector: AV:L/AC:H/Au:S/C:N/I:N/A:N
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.