Radvision iVIEW SCOPIA Management Suite Unspecified SQL Injection Vulnerability
BID:47999
Info
Radvision iVIEW SCOPIA Management Suite Unspecified SQL Injection Vulnerability
| Bugtraq ID: | 47999 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-1328 |
| Remote: | Yes |
| Local: | No |
| Published: | May 19 2011 12:00AM |
| Updated: | May 19 2011 12:00AM |
| Credit: | Hirofumi Oka, NRI Secure Technologies |
| Vulnerable: |
Radvision iVIEW SCOPIA Management Suite 0 |
| Not Vulnerable: | |
Discussion
Radvision iVIEW SCOPIA Management Suite Unspecified SQL Injection Vulnerability
The iVIEW SCOPIA Management Suite is prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to iVIEW SCOPIA Management Suite 7.5 are vulnerable.
The iVIEW SCOPIA Management Suite is prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to iVIEW SCOPIA Management Suite 7.5 are vulnerable.
References
Radvision iVIEW SCOPIA Management Suite Unspecified SQL Injection Vulnerability
References:
References:
- iVIEW SCOPIA Management Suite Homepage (RADVISION)
- JVNDB-2011-000030 iVIEW Suite vulnerable to SQL injection (Hirofumi Oka)