SAPHP Lesson Multiple SQL Injection Vulnerabilities
BID:17848
Info
SAPHP Lesson Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 17848 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-2279 |
| Remote: | Yes |
| Local: | No |
| Published: | May 04 2006 12:00AM |
| Updated: | Jul 06 2016 01:33PM |
| Credit: | [email protected] is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
saPHP saPHP 3.0 |
| Not Vulnerable: | |
Discussion
SAPHP Lesson Multiple SQL Injection Vulnerabilities
The saphp Lesson module is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
The saphp Lesson module is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Exploit / POC
SAPHP Lesson Multiple SQL Injection Vulnerabilities
These issues can be exploited through a web client.
These issues can be exploited through a web client.
Solution / Fix
SAPHP Lesson Multiple SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
SAPHP Lesson Multiple SQL Injection Vulnerabilities
References:
References: