Aanval Multiple Cross Site Scripting and SQL Injection Vulnerabilities
BID:62826
Info
Aanval Multiple Cross Site Scripting and SQL Injection Vulnerabilities
| Bugtraq ID: | 62826 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 03 2013 12:00AM |
| Updated: | Oct 03 2013 12:00AM |
| Credit: | xistence |
| Vulnerable: |
Tactical FLEX Aanval 7.1 build 70151 |
| Not Vulnerable: | |
Discussion
Aanval Multiple Cross Site Scripting and SQL Injection Vulnerabilities
Aanval is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input.
Attackers can exploit these issues to execute arbitrary code in the context of the browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database; other attacks are also possible.
Aanval 7.1 build 70151 is vulnerable; other versions may also be affected.
Aanval is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input.
Attackers can exploit these issues to execute arbitrary code in the context of the browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database; other attacks are also possible.
Aanval 7.1 build 70151 is vulnerable; other versions may also be affected.
Solution / Fix
Aanval Multiple Cross Site Scripting and SQL Injection Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Aanval Multiple Cross Site Scripting and SQL Injection Vulnerabilities
References:
References:
- Aanval Homepage (Tactical FLEX)