Vulnerability   
Search   
    Search 191973 CVE descriptions
and 86218 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.150354
Category:Policy
Title:openGauss: Configuring the Backslash Quote Usage
Summary:backslash_quote specifies whether a single quotation mark (') in a string can be;replaced by a backslash quote (\'). The backslash-quote (\') is accepted in;PostgreSQL due to historical reasons. However, this may bring security risks, such;as SQL injection attacks. To prevent such risks, you are advised to set;backslash_quote to deny queries containing the backslash-quote. In addition, you;are advised to use SQL standard method in which a single quotation mark (') is;Repeated ('').
Description:Summary:
backslash_quote specifies whether a single quotation mark (') in a string can be
replaced by a backslash quote (\'). The backslash-quote (\') is accepted in
PostgreSQL due to historical reasons. However, this may bring security risks, such
as SQL injection attacks. To prevent such risks, you are advised to set
backslash_quote to deny queries containing the backslash-quote. In addition, you
are advised to use SQL standard method in which a single quotation mark (') is
Repeated ('').

CVSS Score:
0.0

CVSS Vector:
AV:L/AC:H/Au:S/C:N/I:N/A:N

CopyrightCopyright (C) 2020 Greenbone Networks GmbH

This is only one of 86218 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.