ReadMore Systems 'emailus.php' SQL Error Information Disclosure Vulnerability
BID:44688
Info
ReadMore Systems 'emailus.php' SQL Error Information Disclosure Vulnerability
| Bugtraq ID: | 44688 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 05 2010 12:00AM |
| Updated: | Nov 05 2010 12:00AM |
| Credit: | KnocKout |
| Vulnerable: |
ReadMore Systems ReadMore Systems 0 |
| Not Vulnerable: | |
Discussion
ReadMore Systems 'emailus.php' SQL Error Information Disclosure Vulnerability
ReadMore Systems is prone to an information-disclosure vulnerability due to an SQL error.
Exploiting this issue can allow attackers to gain access to sensitive information contained in the application's database. Successful exploits may lead to other attacks.
ReadMore Systems is prone to an information-disclosure vulnerability due to an SQL error.
Exploiting this issue can allow attackers to gain access to sensitive information contained in the application's database. Successful exploits may lead to other attacks.
Exploit / POC
ReadMore Systems 'emailus.php' SQL Error Information Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
ReadMore Systems 'emailus.php' SQL Error Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
ReadMore Systems 'emailus.php' SQL Error Information Disclosure Vulnerability
References:
References:
- ReadMore Systems Homepage (ReadMore Systems)