CVE-2012-1618

CVE-2012-1618 describes an SQL injection vulnerability in the PostgreSQL JDBC driver prior to version 8.2. This flaw occurs when the driver interacts with a PostgreSQL server that has the "standard_conforming_strings" option enabled (default in PostgreSQL 9.1), failing to properly escape unspecified JDBC statement parameters. It primarily affects the PostgreSQL JDBC driver and PostgreSQL database itself. This vulnerability carries a CVSS score of 7.5, indicating high severity. It can be exploited remotely with low attack complexity and no authentication required, potentially leading to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.