AlphaOne Technology Support Forums
Welcome, Guest. Please login or register.
January 08, 2009, 09:25:51 PM

Login with username, password and session length
Search:     Advanced search
1733 Posts in 827 Topics by 5356 Members
Latest Member: Gagabaksik
* Home Help Search Login Register
AlphaOne Technology Support Forums  |  IMPORTANT ANNOUNCEMENTS  |  Security Announcements  |  Topic: phpWebSite "module" Parameter Remote SQL Injection Vulnerability 0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: phpWebSite "module" Parameter Remote SQL Injection Vulnerability  (Read 736 times)
TJ
Tech Team
Hero Member
********
Offline Offline

Posts: 136



View Profile
phpWebSite "module" Parameter Remote SQL Injection Vulnerability
« on: August 17, 2005, 04:40:26 PM »

* Technical Description *

A vulnerability was identified in phpWebSite, which may be exploited by remote attackers to execute arbitrary SQL commands. This flaw is due to an input validation error when processing a specially crafted "module" parameter, which may be exploited by remote users to conduct SQL injection attacks.

 * Affected Products *

phpWebSite version 0.10.1 and prior

 * Solution *

No official supplied patch for this issue.

 * References *

http://www.frsirt.com/english/advisories/2005/1440
Logged
Pages: [1] Go Up Print 
AlphaOne Technology Support Forums  |  IMPORTANT ANNOUNCEMENTS  |  Security Announcements  |  Topic: phpWebSite "module" Parameter Remote SQL Injection Vulnerability « previous next »
Jump to:  

Powered by MySQL Powered by PHP AlphaOne Technology Support Forums | Powered by SMF 1.0.7.
© 2001-2005, Lewis Media. All Rights Reserved.
Valid XHTML 1.0! Valid CSS!