Previous articleBack to news listNext article
|
Sponsored links |
Want to become one of our authors and see your work published on ALLSeek.iNFO ?
|
| Re-Boot Design ASP Forum SQL Injection Flaw Yields Remote Access to Any User Account |
|---|
Categorie: Vulnerability
Posted: 2003-09-27 by ReCall
Views: 346
Source: Click here
| Current Rating: Not rated
|
|
| Details |
|---|
Description: A vulnerability was reported in Re-Boot Design's ASP Forum. A remote user can inject SQL commands to gain access to accounts on the application.
It is reported that the software does not properly validate user-supplied input. A remote user can supply the following string as a password to login to any user account:
'or''='
Impact: A remote user can inject SQL commands to gain access to a specified target user's account.
Solution: No solution was available at the time of this entry.
|
| Syndication |
|---|
Permalink Email this
The URI to TrackBack this entry is:
http://allseek.info/news/trackback.php?id=476
|
| User comments (post your comments ) |
|---|
Only registerd members can post comments and articles
|
|
Previous articleBack to news listNext article
|
