ID de Prueba:	1.3.6.1.4.1.25623.1.0.103328
Categoría:	Web application abuses
Título:	eFront Multiple Cross Site Scripting and SQL Injection Vulnerabilities
Resumen:	eFront is prone to multiple cross-site scripting and SQL-injection; vulnerabilities because the software fails to sufficiently sanitize user-supplied input.
Descripción:	Summary: eFront is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the software fails to sufficiently sanitize user-supplied input. Vulnerability Impact: Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Affected Software/OS: eFront 3.6.10 build 11944 is vulnerable. Other versions may also be affected. Solution: Updates are available. Please see the references for details. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.