Search for vulnerabilities
Vulnerability details: VCID-1k1a-xdav-w3c6
Vulnerability ID VCID-1k1a-xdav-w3c6
Aliases CVE-2013-1899
Summary A connection request containing a database name that begins with "-" may be crafted to damage or destroy files within a server's data directorymore details
Status Published
Exploitability 2.0
Weighted Severity 0.8
Risk 1.6
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.87779 https://api.first.org/data/v1/epss?cve=CVE-2013-1899
epss 0.87779 https://api.first.org/data/v1/epss?cve=CVE-2013-1899
epss 0.87779 https://api.first.org/data/v1/epss?cve=CVE-2013-1899
epss 0.87779 https://api.first.org/data/v1/epss?cve=CVE-2013-1899
epss 0.87779 https://api.first.org/data/v1/epss?cve=CVE-2013-1899
epss 0.87779 https://api.first.org/data/v1/epss?cve=CVE-2013-1899
epss 0.87779 https://api.first.org/data/v1/epss?cve=CVE-2013-1899
epss 0.87779 https://api.first.org/data/v1/epss?cve=CVE-2013-1899
epss 0.87779 https://api.first.org/data/v1/epss?cve=CVE-2013-1899
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1899.json
https://api.first.org/data/v1/epss?cve=CVE-2013-1899
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1899
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1900
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1901
https://www.postgresql.org/support/security/CVE-2013-1899/
929223 https://bugzilla.redhat.com/show_bug.cgi?id=929223
USN-1789-1 https://usn.ubuntu.com/1789-1/
Data source Metasploit
Description This module can identify PostgreSQL 9.0, 9.1, and 9.2 servers that are vulnerable to command-line flag injection through CVE-2013-1899. This can lead to denial of service, privilege escalation, or even arbitrary code execution.
Note 
Reliability:
  - unknown-reliability
Stability:
  - unknown-stability
SideEffects:
  - unknown-side-effects
Ransomware campaign use Unknown
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/postgres/postgres_dbname_flag_injection.rb
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.99432
EPSS Score 0.87779
Published At Aug. 14, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:03:31.815950+00:00 PostgreSQL Importer Import https://www.postgresql.org/support/security/CVE-2013-1899 37.0.0