The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Postgresql | Postgresql | 6.5.0 (including) | 6.5.0 (including) |
Red Hat Database 7.1 | RedHat | * |