|
Family: CGI abuses --> Category: infos
cfWebStore SQL injection Vulnerability Scan
Vulnerability Scan Summary SQL Injection
Detailed Explanation for this Vulnerability Test
The remote host is running cfWebStore 5.0.0 or older.
There is a flaw in this software which may allow anyone to inject arbitrary
SQL statements in the remote database, which may in turn be used to gain
administrative access on the remote host, read or modify the content of the
remote database.
Solution : Upgrade to cfWebStore 5.0.1 or later.
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|