SSLinks Multiple SQL Injection Vulnerabilities
BID:19815
CVE-2006-4598 |Info
SSLinks Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 19815 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 02 2006 12:00AM |
| Updated: | Sep 06 2006 03:58PM |
| Credit: | Sirdarckcat is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Incutio ssLinks 1.33 |
| Not Vulnerable: | |
Discussion
SSLinks Multiple SQL Injection Vulnerabilities
ssLinks is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query.
A successful attack could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Versions 1.22 and prior are vulnerable to these issues.
ssLinks is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query.
A successful attack could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Versions 1.22 and prior are vulnerable to these issues.
Exploit / POC
SSLinks Multiple SQL Injection Vulnerabilities
Attackers can exploit these issues via a web-client.
Attackers can exploit these issues via a web-client.
Solution / Fix
SSLinks Multiple SQL Injection Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
SSLinks Multiple SQL Injection Vulnerabilities
References:
References: