CNCVE编号：CNCVE-20010201 CVE编号：CAN-2001-0201 安全级别：高 漏洞中文描述： 用于PosrgreSQL的Postaci frontend不能正确的处理诸如semicolons等的字符串，这允许远程攻击者通过deletecontact.php程序来执行任意的SQL查询。 漏洞英文描述： The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program. 漏洞参考： BID:2230 XF:postaci-sql-command-injection BUGTRAQ:20010117 Postaci allows arbitrary SQL query execution 系统类型：其他 漏洞类型：设计错误