Real Web Solution Statistics Counter Service SQL Injection Vulnerability
BID:16052
Info
Real Web Solution Statistics Counter Service SQL Injection Vulnerability
| Bugtraq ID: | 16052 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 23 2005 12:00AM |
| Updated: | Dec 23 2005 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Real Web Solution Statistics Counter Service 2.4 |
| Not Vulnerable: |
Real Web Solution Statistics Counter Service 2.4.1 |
Discussion
Real Web Solution Statistics Counter Service SQL Injection Vulnerability
Statistics Counter Service is prone to an SQL injection vulnerability.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
This issue affects Statistics Counter Service versions prior to 2.4.1.
Statistics Counter Service is prone to an SQL injection vulnerability.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
This issue affects Statistics Counter Service versions prior to 2.4.1.
Exploit / POC
Real Web Solution Statistics Counter Service SQL Injection Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Real Web Solution Statistics Counter Service SQL Injection Vulnerability
Solution:
The vendor has released Statistics Counter Service 2.4.1 to address this issue. Please contact the vendor to obtain an upgrade.
Solution:
The vendor has released Statistics Counter Service 2.4.1 to address this issue. Please contact the vendor to obtain an upgrade.
References
Real Web Solution Statistics Counter Service SQL Injection Vulnerability
References:
References:
- Statistics Counter Service (Real Web Solution)