← Back

Pl/php

pl/php

Vendor: Alvaro Herrera • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-3781
1Alvaro Herrera
1Pl/php
Apr 29, 2026
Oct 6, 2010
N/A· v4
N/A· v3
6.0 MEDIUM· v2
The PL/php add-on 1.4 and earlier for PostgreSQL does not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain privileges via crafted...Show more
The PL/php add-on 1.4 and earlier for PostgreSQL does not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function, a related issue to CVE-2010-3433.Show less