Query Deluxe vulnerabilities
We track 1 vulnerability in Query Deluxe products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 6, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Query Deluxe vulnerabilities
- 9.8 Critical severity
query_deluxe: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in Yvan Dotet PostgreSQL Query Deluxe module (aka query_deluxe) 17.x before 17.0.0.4 allows a remote attacker to gain privileges via the query parameter to models/querydeluxe.py:QueryDeluxe::get_result_from_query.