Fretsweb Multiple SQL Injection Vulnerabilities
BID:43854
Info
Fretsweb Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 43854 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-2113 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2009 12:00AM |
| Updated: | Oct 08 2010 09:49PM |
| Credit: | YEnH4ckEr |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Fretsweb Multiple SQL Injection Vulnerabilities
Fretsweb is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Fretsweb 1.2 is vulnerable; other versions may also be affected.
Fretsweb is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Fretsweb 1.2 is vulnerable; other versions may also be affected.
Exploit / POC
Fretsweb Multiple SQL Injection Vulnerabilities
Attackers can exploit these issues via a browser.
The following exploit code is available:
Attackers can exploit these issues via a browser.
The following exploit code is available:
Solution / Fix
Fretsweb Multiple SQL Injection Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Fretsweb Multiple SQL Injection Vulnerabilities
References:
References: