IBM Datacap Taskmaster Capture Unspecified SQL Injection Vulnerability
BID:47848
Info
IBM Datacap Taskmaster Capture Unspecified SQL Injection Vulnerability
| Bugtraq ID: | 47848 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-2141 |
| Remote: | Yes |
| Local: | No |
| Published: | May 13 2011 12:00AM |
| Updated: | Apr 13 2015 09:01PM |
| Credit: | IBM |
| Vulnerable: |
IBM Datacap Taskmaster Capture 8.0.1 |
| Not Vulnerable: |
IBM Datacap Taskmaster Capture 8.0.1 Fix Pack 1 |
Discussion
IBM Datacap Taskmaster Capture Unspecified SQL Injection Vulnerability
The Datacap Taskmaster Capture is prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to Datacap Taskmaster Capture 8.0.1 Fix Pack 1 are vulnerable.
The Datacap Taskmaster Capture is prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to Datacap Taskmaster Capture 8.0.1 Fix Pack 1 are vulnerable.
References
IBM Datacap Taskmaster Capture Unspecified SQL Injection Vulnerability
References:
References: