DWC_Articles Multiple Unspecified SQL Injection Vulnerabilities

Bugtraq ID:	11509
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 23 2004 12:00AM
Updated:	Oct 23 2004 12:00AM
Credit:	Discovery is credited to Rene <[email protected]>.
Vulnerable:	Distinct Web Creations DWC_Articles 1.6
Not Vulnerable:

DWC_Articles Multiple Unspecified SQL Injection Vulnerabilities

Multiple SQL injection vulnerabilities are alleged to exist in DWC_Articles. These issues are reported to be present in nearly all of the scripts associated with the software, though the individual who reported these issues has not published any further details about the specific vulnerabilities.

Successful exploitation could allow remote attackers to compromise the software or potentially compromise security properties of the underlying database.

DWC_Articles Multiple Unspecified SQL Injection Vulnerabilities

These issues may be exploited with a Web browser.

DWC_Articles Multiple Unspecified SQL Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

DWC_Articles Multiple Unspecified SQL Injection Vulnerabilities

References:

• Distinct Web Creations Homepage (Distinct Web Creations)
  
• dwc_articles possible sql injection (Rene )