SOL.Connect ISET-mpp meter CVE-2017-11494 SQL Injection Vulnerability
BID:100067
Info
SOL.Connect ISET-mpp meter CVE-2017-11494 SQL Injection Vulnerability
| Bugtraq ID: | 100067 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-11494 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 01 2017 12:00AM |
| Updated: | Aug 01 2017 12:00AM |
| Credit: | Andy Tan |
| Vulnerable: |
Papendorf Software Engineering SOL.Connect ISET-mpp meter 1.2.4.2 |
| Not Vulnerable: | |
Discussion
SOL.Connect ISET-mpp meter CVE-2017-11494 SQL Injection Vulnerability
SOL.Connect ISET-mpp meter is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
SOL.Connect ISET-mpp meter 1.2.4.2 is vulnerable; other versions may also be affected.
SOL.Connect ISET-mpp meter is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
SOL.Connect ISET-mpp meter 1.2.4.2 is vulnerable; other versions may also be affected.
Exploit / POC
SOL.Connect ISET-mpp meter CVE-2017-11494 SQL Injection Vulnerability
An attacker can exploit this issue using a web browser. The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
An attacker can exploit this issue using a web browser. The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
SOL.Connect ISET-mpp meter CVE-2017-11494 SQL Injection Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
SOL.Connect ISET-mpp meter CVE-2017-11494 SQL Injection Vulnerability
References:
References:
- [CVE-2017-11494] SOL.Connect ISET-mpp meter 1.2.4.2 Authentication Bypass SQL In (Andy Tan)
- SOL.Connect ISET-mpp meter Product Page (Papendorf Software Engineering )