NolaPro Multiple SQL Injection Vulnerabilities
BID:44885
Info
NolaPro Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 44885 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 16 2010 12:00AM |
| Updated: | Nov 16 2010 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
NolaPro NolaPro 4.0.6355 |
| Not Vulnerable: |
NolaPro NolaPro 4.0.6407 |
Discussion
NolaPro Multiple SQL Injection Vulnerabilities
NolaPro is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
NolaPro 4.0.6355 is vulnerable; other versions may also be affected.
NolaPro is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
NolaPro 4.0.6355 is vulnerable; other versions may also be affected.
Exploit / POC
NolaPro Multiple SQL Injection Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
NolaPro Multiple SQL Injection Vulnerabilities
Solution:
Vendor updates available. Please see the references for more information.
Solution:
Vendor updates available. Please see the references for more information.
References
NolaPro Multiple SQL Injection Vulnerabilities
References:
References:
- NolaPro Homepage (Noguska LLC)
- Version 4.0.6407 of NolaPro (Geeknet)