 |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
| ID de Prueba: | 1.3.6.1.4.1.25623.1.0.100004 |
| Categoría: | Web application abuses |
| Título: | Joomla! and Mambo gigCalendar Component SQLi Vulnerability - Active Check |
| Resumen: | The gigCalendar component for Joomla! and Mambo is prone to an; SQL injection (SQLi) vulnerability because it fails to sufficiently sanitize user-supplied data; before using it in an SQL query. |
| Descripción: | Summary: The gigCalendar component for Joomla! and Mambo is prone to an SQL injection (SQLi) vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Vulnerability Impact: Successful exploitation will allow the attacker to view username and password of a registered user. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Affected Software/OS: gigCalendar 1.0 is vulnerable, other versions may also be affected. Solution: - Update to a newer version if available - Remove the gigCalendar component CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P |
| Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2009-0730 BugTraq ID: 33859 http://www.securityfocus.com/bid/33859 BugTraq ID: 33863 http://www.securityfocus.com/bid/33863 Bugtraq: 20090221 gigCalendar 1.0 (banddetails.php) Joomla Component SQL Injection (Google Search) http://www.securityfocus.com/archive/1/501176/100/0/threaded Bugtraq: 20090221 gigCalendar 1.0 (venuedetails.php) Joomla Component SQL Injection (Google Search) http://www.securityfocus.com/archive/1/501175/100/0/threaded Bugtraq: 20090221 gigCalendar Joomla Component 1.0 SQL Injection (Google Search) http://www.securityfocus.com/archive/1/501174/100/0/threaded XForce ISS Database: gigcalendar-venuedetails-sql-injection(48865) https://exchange.xforce.ibmcloud.com/vulnerabilities/48865 |
| Copyright | Copyright (C) 2009 Greenbone AG |
| Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |