Business Community Script SQL Injection and Unauthorized Access Vulnerabilities
BID:34976
Info
Business Community Script SQL Injection and Unauthorized Access Vulnerabilities
| Bugtraq ID: | 34976 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 14 2009 12:00AM |
| Updated: | May 15 2009 07:36PM |
| Credit: | TiGeR-Dz |
| Vulnerable: |
i-Net Solution Business Community Script 0 |
| Not Vulnerable: | |
Discussion
Business Community Script SQL Injection and Unauthorized Access Vulnerabilities
Business Community Script is prone to an SQL-injection vulnerability and an unauthorized-access vulnerability.
Exploiting these issues could allow an attacker to gain unauthorized administrative access to the application, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Business Community Script is prone to an SQL-injection vulnerability and an unauthorized-access vulnerability.
Exploiting these issues could allow an attacker to gain unauthorized administrative access to the application, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
Business Community Script SQL Injection and Unauthorized Access Vulnerabilities
Attackers can use a browser to exploit these issues.
The following example code and URIs are available:
Attackers can use a browser to exploit these issues.
The following example code and URIs are available:
Solution / Fix
Business Community Script SQL Injection and Unauthorized Access Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Business Community Script SQL Injection and Unauthorized Access Vulnerabilities
References:
References:
- Business Community Script Homepage (i-Net Solutions)