Sploitus

Exploit for POC

CVE-2025-1094

kitploit · 2026-09-03

Exploit Code

MARKDOWN22 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-TRANDONGA3-POC-CVE-2025-1094
# POC CVE-2025-1094: PostgreSQL psql SQL Injection

> **Proof of Concept** for critical SQL Injection vulnerability in PostgreSQL client libpq and psql tool

## 📋 Table of Contents

  1. Vulnerability Overview
  2. Project Directory Structure
  3. Attack Payload Analysis
  4. Usage Guide
  5. Mitigation & Prevention



* * *

## 1\. Vulnerability Overview

### General Description

**CVE-2025-1094** is a critical vulnerability in the PostgreSQL client library `libpq` and the command-line tool `psql`. This flaw allows an attacker to perform SQL Injection and escalate to Remote Code Execution (RCE) even when the application uses standard string escaping functions such as `PQescapeLiteral`.