CVEs-PoC/2017/CVE-2017-16082.md

CVE-2017-16082

Description

A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) Connecting to an untrusted database and executing a query which returns results where any of the column names are malicious.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/XiaomingX/awesome-poc-for-red-team
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/nulldreams/CVE-2017-16082
• https://github.com/ossf-cve-benchmark/CVE-2017-16082