|
Family: CGI abuses --> Category: infos
DUclassmate Multiple SQL Injection Vulnerabilities Vulnerability Scan
Vulnerability Scan Summary Checks for multiple SQL injection vulnerabilities in DUclassmate
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains an ASP application that is vulnerable
to multiple SQL injection attacks.
Description :
The remote host is running DUclassmate, a web-based classmates listing
and friends search application from DUware and written in ASP.
The installed version of DUclassmate fails to properly sanitize user-
supplied input in several instances before using it in SQL queries.
By exploiting these flaws, a possible hacker can affect database queries,
possibly disclosing sensitive data and launching attacks against the
underlying database.
See also :
http://echo.or.id/adv/adv19-theday-2005.txt
http://archives.neohapsis.com/archives/bugtraq/2005-06/0172.html
Solution :
Unknown at this time.
Threat Level:
Medium / CVSS Base Score : 5
(AV:R/AC:L/Au:NR/C:P/A:N/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|