ComicMaster Unspecified SQL Injection Vulnerability
BID:42493
Info
ComicMaster Unspecified SQL Injection Vulnerability
| Bugtraq ID: | 42493 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 26 2009 12:00AM |
| Updated: | Oct 26 2009 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
ComicMaster Unspecified SQL Injection Vulnerability
ComicMaster is prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
ComicMaster versions prior to 0064 are vulnerable.
ComicMaster is prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
ComicMaster versions prior to 0064 are vulnerable.
Exploit / POC
ComicMaster Unspecified SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
ComicMaster Unspecified SQL Injection Vulnerability
Solution:
An update is available. Please see the references for more information.
Solution:
An update is available. Please see the references for more information.
References
ComicMaster Unspecified SQL Injection Vulnerability
References:
References:
- ComicMaster Homepage (ComicMaster)
- ComicMaster Version 0064 Fix (ComicMaster)