OSVDB ID: 13714 Title: AspJar Guestbook login.asp password Parameter SQL Injection |
Info |
|
|
Dates |
||||
|
|
Description |
AspJar Guestbook contains a flaw that will allow an attacker to inject arbitrary SQL code. The problem is that the password variable in the authentication module login.asp is not verified properly and will allow an attacker to inject or manipulate SQL queries. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Information Disclosure, Input Manipulation Impact: Loss of Confidentiality, Loss of Integrity Exploit: Exploit Available Disclosure: OSVDB Verified OSVDB: Web Related |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|
yahoo.com -