3 ms·
Opening and querying untrusted SQLite database can lead to (remote) code execution. Original research at https://research.checkpoint.com/2019/select-code_execut
by magnat 6y ago
Opening and querying untrusted SQLite database can lead to (remote) code execution. Original research at https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/ https://research.checkpoint.com/2019/select-code_execution-f...
- aidenn0 6y agoThat's a great writeup; the fact that a view can transform any known static query into an attacker-chosen SELECT makes the attack surface huge.