‹ Back to list

CVE-2010-3781

Status: ModifiedMedium (6)—
Severity6Medium · CVSS 2.0
Exploitation probability1.54 %higher than 75% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found

The PL/php add-on 1.4 and earlier for PostgreSQL does not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function, a related issue to CVE-2010-3433.

CVSS

Base score
6
Version
2.0
Vector
AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days
1.54 %
Percentile among all scored CVEs
75
Score date
10/23/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Alvaro Herrera — Pl/php

CWEs

References

Show 6 references

Raw JSON (NVD)

Show
{
  "id": "CVE-2010-3781",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-10-06T21:00:01.430",
  "references": [
    {
      "url": "http://www.postgresql.org/about/news.1244",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.postgresql.org/docs/9.0/static/release-9-0-1.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6645",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.postgresql.org/about/news.1244",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.postgresql.org/docs/9.0/static/release-9-0-1.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6645",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The PL/php add-on 1.4 and earlier for PostgreSQL does not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function, a related issue to CVE-2010-3433."
    },
    {
      "lang": "es",
      "value": "El complemento PL/php v1.4 y anteriores para PostgreSQL no protege adecuadamente la ejecución de secuencias de comando por un usuario SQL diferente en la misma sesión, lo que permite a usuarios autenticados remotamente ganar privilegios a través de la función SECURITY DEFINER en secuencias de comando manipuladas. Relacionado con el fallo CVE-2010-3433."
    }
  ],
  "lastModified": "2026-06-16T23:23:31.650",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:alvaro_herrera:pl\\/php:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "348D5331-ECC6-4E02-8297-663F09311F8B",
              "versionEndIncluding": "1.4"
            },
            {
              "criteria": "cpe:2.3:a:alvaro_herrera:pl\\/php:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82763B21-180E-4820-91AA-9475E535D9AE"
            },
            {
              "criteria": "cpe:2.3:a:alvaro_herrera:pl\\/php:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35B237D7-2059-4BD0-BE8D-65E93180360B"
            },
            {
              "criteria": "cpe:2.3:a:alvaro_herrera:pl\\/php:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90B0A478-57CF-4BF2-B6D5-2D55259A5300"
            },
            {
              "criteria": "cpe:2.3:a:alvaro_herrera:pl\\/php:1.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "962A3D30-7C0D-489F-896E-7718FB1A927F"
            },
            {
              "criteria": "cpe:2.3:a:alvaro_herrera:pl\\/php:1.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16F6ADAE-8DE8-46AB-BF15-CE0948305ABE"
            },
            {
              "criteria": "cpe:2.3:a:alvaro_herrera:pl\\/php:1.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82F0F4C7-5404-4D53-8B56-42F38E96FC19"
            },
            {
              "criteria": "cpe:2.3:a:alvaro_herrera:pl\\/php:1.3.5:beta1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B349755-B641-4C9C-907C-4C83C4D6E64F"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E5A47A8B-5F2B-42B1-A8F6-ACDBEA4D8485"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}