Description
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
Remediation
References
Related Vulnerabilities
Moodle Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-1754)
WordPress Plugin Business Hours Indicator Cross-Site Scripting (2.3.4)
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-10188)
WordPress Plugin Titan Anti-spam & Security Security Bypass (7.3.0)