Invision Power Top Site List Offset SQL Injection Vulnerability
BID:9229
Info
Invision Power Top Site List Offset SQL Injection Vulnerability
| Bugtraq ID: | 9229 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2003 12:00AM |
| Updated: | Dec 15 2003 12:00AM |
| Credit: | Discovery is credited to JeiAr <[email protected]>. |
| Vulnerable: |
Invision Power Services Invision Power Top Site List 1.1 Invision Power Services Invision Power Top Site List 1.0 |
| Not Vulnerable: | |
Discussion
Invision Power Top Site List Offset SQL Injection Vulnerability
Invision Power Top Site List is prone to SQL injection attacks. This may permit remote attackers to influence the logic and structure of database queries. Exploitation could permit for compromise of the software, disclosure of sensitive information or other attacks. It should be noted that exploitation might be limited due to the complexity of the queries affected.
Invision Power Top Site List is prone to SQL injection attacks. This may permit remote attackers to influence the logic and structure of database queries. Exploitation could permit for compromise of the software, disclosure of sensitive information or other attacks. It should be noted that exploitation might be limited due to the complexity of the queries affected.
Exploit / POC
Invision Power Top Site List Offset SQL Injection Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Invision Power Top Site List Offset SQL Injection Vulnerability
Solution:
The vendor has acknowledged this issue and stated that it will be fixed in the next pending release of the software.
Solution:
The vendor has acknowledged this issue and stated that it will be fixed in the next pending release of the software.
References
Invision Power Top Site List Offset SQL Injection Vulnerability
References:
References:
- Invision Top Site List Homepage (Invision Power Services)
- Invision Power Top Site List SQL Inection (JeiAr