Zengaia Unspecified SQL Injection Vulnerability
BID:14892
Info
Zengaia Unspecified SQL Injection Vulnerability
| Bugtraq ID: | 14892 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 21 2005 12:00AM |
| Updated: | Sep 21 2005 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Zengaia Zengaia 0.1.5 |
| Not Vulnerable: |
Zengaia Zengaia 0.2.1 Zengaia Zengaia 0.2 |
Discussion
Zengaia Unspecified SQL Injection Vulnerability
Zengaia is reportedly affected by an unspecified SQL injection vulnerability.
Successful exploitation could result in a compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Zengaia versions prior to 0.2 are reported to be affected.
Zengaia is reportedly affected by an unspecified SQL injection vulnerability.
Successful exploitation could result in a compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Zengaia versions prior to 0.2 are reported to be affected.
Exploit / POC
Zengaia Unspecified SQL Injection Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Zengaia Unspecified SQL Injection Vulnerability
Solution:
Zengaia 0.2 and subsequent versions are not vulnerable to this issue.
Zengaia Zengaia 0.1.5
Solution:
Zengaia 0.2 and subsequent versions are not vulnerable to this issue.
Zengaia Zengaia 0.1.5
-
Zengaia zengaia0.2.1src.zip
http://www.mpc-donkey.de/zengaia/zengaia0.2.1src.zip