CVE:CVE-2013-4422
CNNVD:CNNVD-201310-535
Quassel（Quassel IRC）是一个图形化、分布式、跨平台IRC 客户端。
Quassel IRC 0.9.90及之前的版本中存在SQL注入漏洞，当Qt 4.8.5及更高版本和PostgreSQL 8.2及更高的版本启用‘standard_conforming_strings’选项时，远程攻击者可通过发送特制的IRC消息利用该漏洞执行任意SQL命令。
solution:Upgrade quassel-irc quassel_irc to a higher version than 0.9.0,0.1.0,0.3.0,0.3.0.1,0.3.0.2,0.3.0.3,0.3.1,0.4.0,0.4.1,0.4.2,0.4.3,0.5.0,0.6.1,0.6.2,0.6.3,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.8.0,and avoid the version (,0.9.0],0.1.0,0.3.0,0.3.0.1,0.3.0.2,0.3.0.3,0.3.1,0.4.0,0.4.1,0.4.2,0.4.3,0.5.0,0.6.1,0.6.2,0.6.3,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.8.0