OSVDB ID: 13853

Title: ulog-php Unspecified SQL Injection

Info

Disclosure

Feb 16, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

ulog-php contains an input validation flaw that may allow an attacker to manipulate SQL queries. No further details have been provided.

Classification

Location: Remote/Network Access Required
Attack Type: Information Disclosure, Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

Upgrade to version 1.0.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

INL

Ulog-php

0.9.1

References

Credit

  • INL - INL


Direct URL: http://osvdb.org/36218