Posnic Multiple Cross Site Scripting and SQL Injection Vulnerabilities
BID:62766
Info
Posnic Multiple Cross Site Scripting and SQL Injection Vulnerabilities
| Bugtraq ID: | 62766 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 26 2013 12:00AM |
| Updated: | Sep 26 2013 12:00AM |
| Credit: | Sarahma Security |
| Vulnerable: |
Posnic Posnic 1.02 |
| Not Vulnerable: | |
Discussion
Posnic Multiple Cross Site Scripting and SQL Injection Vulnerabilities
Posnic is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input.
Attackers can exploit these issues to execute arbitrary code in the context of the browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database; other attacks are also possible.
Posnic 1.02 is vulnerable; other versions may also be affected.
Posnic is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input.
Attackers can exploit these issues to execute arbitrary code in the context of the browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database; other attacks are also possible.
Posnic 1.02 is vulnerable; other versions may also be affected.
Solution / Fix
Posnic Multiple Cross Site Scripting and SQL Injection Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].