The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks.
Product | Vendor | Version |
---|---|---|
n/a | n/a | < 2.10.10-lts |