IBM Security SiteProtector CVE-2015-0161 Unspecified SQL Injection Vulnerability
BID:72108
Info
IBM Security SiteProtector CVE-2015-0161 Unspecified SQL Injection Vulnerability
| Bugtraq ID: | 72108 |
| Class: | Design Error |
| CVE: |
CVE-2015-0161 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 27 2015 12:00AM |
| Updated: | Mar 27 2015 12:00AM |
| Credit: | Paul Ionescu, Brennan Brazeau, John Zuccato, Jonathan Fitz-Gerald and Warren Moynihan |
| Vulnerable: |
IBM Security SiteProtector System 3.1.1 IBM Security SiteProtector System 3.1 IBM Security SiteProtector System 3.0 |
| Not Vulnerable: | |
Discussion
IBM Security SiteProtector CVE-2015-0161 Unspecified SQL Injection Vulnerability
IBM Security SiteProtector is prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
IBM Security SiteProtector is prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
IBM Security SiteProtector CVE-2015-0161 Unspecified SQL Injection Vulnerability
Attackers can exploit this issue using browser.
Attackers can exploit this issue using browser.