Description
The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Filter Gallery Cross-Site Scripting (0.1.5)
WordPress Plugin Easy Digital Downloads QR Code Cross-Site Scripting (1.1.0)
WordPress Plugin Car Rental System SQL Injection (3.0)
Drupal Core 8.8.x Remote Code Execution (8.8.0 - 8.8.7)
Atlassian Jira Missing Authorization Vulnerability (CVE-2019-3399)