Gazelle Security Bypass and SQL Injection Vulnerabilities
BID:63027
Info
Gazelle Security Bypass and SQL Injection Vulnerabilities
| Bugtraq ID: | 63027 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 15 2013 12:00AM |
| Updated: | Oct 15 2013 12:00AM |
| Credit: | Bogdan Calin and Acunetix Web Vulnerability Scanner |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Gazelle Security Bypass and SQL Injection Vulnerabilities
Gazelle is prone to a security-bypass vulnerability and an SQL-injection vulnerability.
An attacker can exploit these issues to bypass certain security restrictions, perform unauthorized actions and modify the logic of SQL queries.
Gazelle is prone to a security-bypass vulnerability and an SQL-injection vulnerability.
An attacker can exploit these issues to bypass certain security restrictions, perform unauthorized actions and modify the logic of SQL queries.
Exploit / POC
Gazelle Security Bypass and SQL Injection Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
Gazelle Security Bypass and SQL Injection Vulnerabilities
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
References
Gazelle Security Bypass and SQL Injection Vulnerabilities
References:
References: