This vulnerability has been flagged as being a Myth/Fake.
Timeline
Disclosure Date
2006-02-24
Description
VPMi Enterprise has been reported to contain an SQL injection issue in the Service_Requests.asp script. Subsequent testing has indicated that while an error exception is thrown on some crafted input, the script will provide the error and sometimes a partial path but will not allow SQL query manipulation. The path disclosed is the same information provided in the URL, so it is not a privileged information disclosure.
Classification
Location:
Remote / Network Access
Attack Type:
Information Disclosure,
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Integrity
OSVDB:
Web Related,
Myth / Fake
Solution
The vulnerability reported is incorrect. No solution required.
