ID de Prueba:	1.3.6.1.4.1.25623.1.0.100029
Categoría:	Web application abuses
Título:	TinX CMS < 3.5.1 SQLi Vulnerability - Active Check
Resumen:	TinX CMS is prone to an SQL injection (SQLi) vulnerability; because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Descripción:	Summary: TinX CMS is prone to an SQL injection (SQLi) vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Vulnerability Impact: Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Affected Software/OS: TinX CMS prior to version 3.5.1. Solution: Update to version 3.5.1 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0825 BugTraq ID: 34021 http://www.securityfocus.com/bid/34021 Bugtraq: 20090306 [Positive Technologies SA:2009-13] TinX CMS 3.x SQL Injection Vulnerability (Google Search) http://www.securityfocus.com/archive/1/501547/100/0/threaded http://en.securitylab.ru/lab/PT-2009-13 http://secunia.com/advisories/34178 XForce ISS Database: tinxcms-rss-sql-injection(49115) https://exchange.xforce.ibmcloud.com/vulnerabilities/49115
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.