|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
GA's Forum Light has been reported to contain an SQL injection issue in the archive.asp script. Subsequent testing by SecurityTracker after the vendor disputed the issue indicates the software uses flat files to store data, not a backend database. Therefore, the SQL injection report is incorrect and was likely diagnosed due to a vbscript parsing error.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Information Disclosure,
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Integrity
Exploit:
Exploit Unavailable
OSVDB:
Web Related,
Myth/Fake
|
|
Solution |
The vulnerability reported is incorrect. No solution required.
|
|
Products |
|
GA's Forum Light
 |
Unknown or Unspecified |
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
