DUware DUportal Multiple Vulnerabilities
BID:9246
Info
DUware DUportal Multiple Vulnerabilities
| Bugtraq ID: | 9246 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 18 2003 12:00AM |
| Updated: | Dec 18 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to JeiAr <[email protected]>. |
| Vulnerable: |
DUWare DUportal Pro 3.2 SQL DUWare DUportal Pro 3.2 DUware DUportal 3.0 SQL DUware DUportal 3.0 |
| Not Vulnerable: | |
Discussion
DUware DUportal Multiple Vulnerabilities
Multiple vulnerabilities have been identified in the software that include file include, cross-site scripting, and unauthorized access via changing the user and administrative passwords.
These vulnerabilities have been reported to be present in DUWare DUportal 3.0, DUportal 3.0 SQL, DUportal Pro 3.2, and DUportal Pro 3.2 SQL.
These issues are currently undergoing further analysis. This cumulative BID will be separated into individual entries when analysis is complete.
Multiple vulnerabilities have been identified in the software that include file include, cross-site scripting, and unauthorized access via changing the user and administrative passwords.
These vulnerabilities have been reported to be present in DUWare DUportal 3.0, DUportal 3.0 SQL, DUportal Pro 3.2, and DUportal Pro 3.2 SQL.
These issues are currently undergoing further analysis. This cumulative BID will be separated into individual entries when analysis is complete.
Exploit / POC
DUware DUportal Multiple Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
DUware DUportal Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
DUware DUportal Multiple Vulnerabilities
References:
References:
- DUware Homepage (DUware)
- Sample Exploits (JeiAr)