Description
When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.
Remediation
References
Related Vulnerabilities
PHP Integer Overflow or Wraparound Vulnerability (CVE-2010-1866)
WordPress Plugin Awesome Support-WordPress HelpDesk & Support Cross-Site Scripting (6.0.5)
Apache Traffic Server Other Vulnerability (CVE-2019-9513)
WordPress Plugin Zingiri Web Shop Cross-Site Scripting (2.4.2)
PostgreSQL Improper Input Validation Vulnerability (CVE-2012-3489)