EImagePro Multiple SQL Injection Vulnerabilities
BID:17911
Info
EImagePro Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 17911 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 09 2006 12:00AM |
| Updated: | May 10 2006 03:39AM |
| Credit: | dj eyes is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Keyvan1 EImagePro 0 |
| Not Vulnerable: | |
Discussion
EImagePro Multiple SQL Injection Vulnerabilities
EImagePro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
EImagePro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Exploit / POC
EImagePro Multiple SQL Injection Vulnerabilities
These issues can be exploited through a web client.
The following proof-of-concept URIs are available:
These issues can be exploited through a web client.
The following proof-of-concept URIs are available:
Solution / Fix
EImagePro Multiple SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].