exploits , vulnerabilities , articles , Web Wiz Forums String Filtering SQL Injection Vulnerability

Title	Web Wiz Forums String Filtering SQL Injection Vulnerability
Published	2007-03-20-12:00AM
Updated	2007-03-21-02:54AM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	Ivan Fratric is credited with the discovery of this vulnerability.
Vulnerable	F5 3DNS 8.05
Not Vulnerable	F5 3-DNS 8.05a
Code	Attackers can use a browser to exploit this issue. The following proof of concept demonstrates this vulnerability: http://www.example.com/[path]/News/page.asp?NewsID=[SQL] /data/vulnerabilities/exploits/23051.html
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
• 2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
• 2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
• 2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
• 2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
• 2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability
• 2009-12-15 Adobe Reader and Acrobat (CVE-2009-4324) Remote Code Execution Vulnerability
• 2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability
• 2009-12-14 Google Chrome DNS Pre-Fetching Proxy Cache Information Disclosure Vulnerability
• 2009-12-14 Oracle E-Business Suite Multiple Remote Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Wed, 16 Dec 2009 04:16:18 +0000