ID de Prueba:	1.3.6.1.4.1.25623.1.0.103913
Categoría:	Web application abuses
Título:	OpenDocMan 'ajax_udf.php' Multiple SQL Injection Vulnerabilities
Resumen:	OpenDocMan is prone to multiple SQL-injection vulnerabilities because;it fails to sufficiently sanitize user-supplied data.
Descripción:	Summary: OpenDocMan is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Vulnerability Insight: The vulnerability exists due to insufficient validation of 'add_value' HTTP GET parameter in '/ajax_udf.php'. Vulnerability Impact: An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database. Affected Software/OS: OpenDocMan 1.2.7.1 is vulnerable. Other versions may also be affected. Solution: Updates are available. Please see the references or vendor advisory for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1945 BugTraq ID: 65775 http://www.securityfocus.com/bid/65775 http://www.opendocman.com/opendocman-v1-2-7-1-release http://www.opendocman.com/opendocman-v1-2-7-2-released https://www.htbridge.com/advisory/HTB23202 http://secunia.com/advisories/56189
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.