Description

The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow remote attackers to execute arbitrary code by leveraging use of HTTP to download software.

Remediation

References

CVE-2016-7048

Related Vulnerabilities

WordPress Plugin Copy or Move Comments Multiple Vulnerabilities (1.0.0)

Oracle JRE CVE-2020-2773 Vulnerability (CVE-2020-2773)

WordPress Plugin Availability Calendar SQL Injection (1.2)

WordPress Plugin Advanced Custom Fields:Table Field Cross-Site Scripting (1.1.12)

Oracle JRE CVE-2013-5801 Vulnerability (CVE-2013-5801)

Severity

High

Classification

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-284 CVE-2016-7048