ID de Prueba:	1.3.6.1.4.1.25623.1.0.105954
Categoría:	Web application abuses
Título:	Redaxscript < 2.3.0 SQLi Vulnerability
Resumen:	Redaxscript is prone to an SQL injection (SQLi) vulnerability.
Descripción:	Summary: Redaxscript is prone to an SQL injection (SQLi) vulnerability. Vulnerability Insight: The search_post function in includes/search.php is prone to an SQLi vulnerability in the search_terms parameter. Vulnerability Impact: An unauthenticated attacker might execute arbitrary SQL commands to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Affected Software/OS: Radexscript 2.2.0. Solution: Update to Radexscript 2.3.0 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1518 Bugtraq: 20150209 Radexscript CMS 2.2.0 - SQL Injection vulnerability (Google Search) http://www.securityfocus.com/archive/1/534661/100/0/threaded http://www.exploit-db.com/exploits/36023 http://seclists.org/fulldisclosure/2015/Feb/39 http://packetstormsecurity.com/files/130322/Radexscript-CMS-2.2.0-SQL-Injection.html http://www.itas.vn/news/itas-team-found-out-a-sql-injection-vulnerability-in-redaxscript-2-2-0-cms-75.html
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.