Aimluck Products Unspecified SQL Injection Vulnerability
BID:45755
Info
Aimluck Products Unspecified SQL Injection Vulnerability
| Bugtraq ID: | 45755 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-3924 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 11 2011 12:00AM |
| Updated: | Mar 19 2015 08:23AM |
| Credit: | Yuki Urabe |
| Vulnerable: |
Aimluck Aipo-Asp 5.1.1 Aimluck Aipo 5.1.1 |
| Not Vulnerable: |
Aimluck Aipo-Asp 5.1 1 Aimluck Aipo 5.1 1 |
Discussion
Aimluck Products Unspecified SQL Injection Vulnerability
Aimluck products are prone to an unspecified SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to Aipo 5.1.0.1 and Aipo ASP 5.1.0 1 are vulnerable.
Aimluck products are prone to an unspecified SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to Aipo 5.1.0.1 and Aipo ASP 5.1.0 1 are vulnerable.
References
Aimluck Products Unspecified SQL Injection Vulnerability
References:
References:
- Aipo / Aipo ASP Homepage (Aimluck)