CVEs-PoC/2018/CVE-2018-1058.md

CVE-2018-1058

Description

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Imangazaliev/web-server-configuration
• https://github.com/J1ezds/Vulnerability-Wiki-page
• https://github.com/Live-Hack-CVE/CVE-2020-14349
• https://github.com/SexyBeast233/SecBooks
• https://github.com/TerraformFoundation/terraform-azurerm-db-postgresql
• https://github.com/TerraformFoundation/terraform-azurerm-db-postgresql-flexible
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/XiaomingX/awesome-poc-for-red-team
• https://github.com/andir/nixos-issue-db-example
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/claranet/terraform-azurerm-db-postgresql
• https://github.com/claranet/terraform-azurerm-db-postgresql-flexible
• https://github.com/claranet/terraform-postgresql-database-configuration
• https://github.com/digoal/blog
• https://github.com/hxysaury/saury-vulnhub
• https://github.com/kerneltravel/pgblog
• https://github.com/lekctut/sdb-hw-13-01
• https://github.com/ngadminq/Bei-Gai-penetration-test-guide
• https://github.com/pedr0alencar/vlab-metasploitable2
• https://github.com/q99266/saury-vulnhub
• https://github.com/stilet/postgraphile-simple-express-starter