quassel: SQL injection
| Package(s): | quassel | CVE #(s): | CVE-2015-3427 | ||||||||||||
| Created: | May 1, 2015 | Updated: | May 6, 2015 | ||||||||||||
| Description: | From the Mageia advisory:
Quassel is vulnerable to SQL injection through its use of Qt's postgres driver. If the PostgreSQL server is restarted or the connection is lost at any point, other IRC users may be able to trick the Quassel core into executing SQL queries upon reconnection. | ||||||||||||||
| Alerts: |
| ||||||||||||||