SAP EMR Unwired CVE-2013-7096 Multiple SQL Injection Vulnerabilities
BID:64314
Info
SAP EMR Unwired CVE-2013-7096 Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 64314 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-7096 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2013 12:00AM |
| Updated: | Dec 16 2013 12:00AM |
| Credit: | Dmitry Evdokimov (ERPScan) |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
SAP EMR Unwired CVE-2013-7096 Multiple SQL Injection Vulnerabilities
SAP EMR Unwired is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.
SAP EMR Unwired is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.
Exploit / POC
SAP EMR Unwired CVE-2013-7096 Multiple SQL Injection Vulnerabilities
An attacker can use readily available tools to exploit these issues.
An attacker can use readily available tools to exploit these issues.
Solution / Fix
SAP EMR Unwired CVE-2013-7096 Multiple SQL Injection Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
SAP EMR Unwired CVE-2013-7096 Multiple SQL Injection Vulnerabilities
References:
References: