ID de Prueba:	1.3.6.1.4.1.25623.1.0.800303
Categoría:	Web application abuses
Título:	e107 alternate_profiles plugin newuser.php SQL Injection Vulnerability
Resumen:	This host is running e107 and is prone to remote SQL injection; vulnerability.
Descripción:	Summary: This host is running e107 and is prone to remote SQL injection vulnerability. Vulnerability Insight: The flaw exists in newuser.php file, which does not validate user input data in the alternate_profiles via the id parameter. Vulnerability Impact: Successful exploitation could allow an attacker to compromise the application, access or modify data in the underlying database. Affected Software/OS: e107 version 0.7.13, alternate_profiles plugin on all running platform. Solution: Upgrade to e107 version 0.7.22 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	BugTraq ID: 31940 Common Vulnerability Exposure (CVE) ID: CVE-2008-4785 http://www.securityfocus.com/bid/31940 https://www.exploit-db.com/exploits/6849 http://securityreason.com/securityalert/4530 http://www.vupen.com/english/advisories/2008/2940
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.