writeups.xyz / All your PostgreSQL databases are belong to us

Submitter : c2a

Date: 28 August 2012

Bounty : undisclosed

Vulnerabilities :

• XXE
• Privilege Escalation

Programs :

• PostgreSQL
• Libxslt

Authors :

• Nicolas Grégoire (@Agarri_FR)

Link :
https://www.agarri.fr/blog/archives/2012/08/28/all_your_postgresql_databases_are_belong_to_us/index.html