|
Family: CGI abuses --> Category: attack
SquirrelCart SQL Injection Vulnerability Scan
Vulnerability Scan Summary SQL Injection in Squirrelcart
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains a PHP application that is subject to
SQL injection attacks.
Description :
The remote host is running SquirrelCart, a shopping cart program
written in PHP.
There is a flaw in the remote software that may allow anyone to inject
arbitrary SQL commands, which may in turn be used to gain
administrative access on the remote host.
SquirrelCart 1.5.5 and prior versions are affected by this flaw.
See also :
http://www.ldev.com/forums/showthread.php?t=1860
Solution :
Upgrade to SquirrelCart 1.6.0 or download a patch from
SquirrelCart.com.
Threat Level:
Medium / CVSS Base Score : 5
(AV:R/AC:L/Au:NR/C:P/A:N/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|