NatterChat Unspecified SQL Injection Vulnerability
BID:11423
Info
NatterChat Unspecified SQL Injection Vulnerability
| Bugtraq ID: | 11423 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 14 2004 12:00AM |
| Updated: | Oct 14 2004 12:00AM |
| Credit: | Discovery is credited to Positive Technologies. |
| Vulnerable: |
NatterChat NatterChat 1.12 |
| Not Vulnerable: | |
Discussion
NatterChat Unspecified SQL Injection Vulnerability
An unspecified SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks.
This vulnerability exists due to insufficient sanitization of user-supplied input. It may be possible for a remote user to inject arbitrary SQL queries into the underlying database used by the application. This could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
Successful exploitation could result in compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
This issue is reported to exist in NatterChat 1.12. Other versions may be affected as well.
An unspecified SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks.
This vulnerability exists due to insufficient sanitization of user-supplied input. It may be possible for a remote user to inject arbitrary SQL queries into the underlying database used by the application. This could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
Successful exploitation could result in compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
This issue is reported to exist in NatterChat 1.12. Other versions may be affected as well.
Exploit / POC
NatterChat Unspecified SQL Injection Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
NatterChat Unspecified SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
NatterChat Unspecified SQL Injection Vulnerability
References:
References:
- NatterChat Homepage (NatterChat)
- NatterChat Input Validation Hole Lets Remote Users Inject SQL Commands (SecurityTracker)