CGI abuses : XMB SQL Injection

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.11587

Categoría: CGI abuses

Título: XMB SQL Injection

Resumen: NOSUMMARY

Descripción: Description:

The remote host is using XMB Forum.

According to its version number, this forum is vulnerable to a
SQL injection bug which may allow an attacker to steal the
passwords hashes of any user of this forum, including the forum
administrator.

Once he has the password hashes, he can easily setup a brute-force
attack to crack the users passwords and then impersonate them. If the
administrator password is obtained, an attacker may even edit the
content of this website.

Solution: Upgrade to XMB Forum 1.8 SP1 or newer
Risk factor : Medium

Referencia Cruzada: BugTraq ID: 7406

Copyright This script is Copyright (C) 2003 Renaud Deraison

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.11587
Categoría:	CGI abuses
Título:	XMB SQL Injection
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is using XMB Forum. According to its version number, this forum is vulnerable to a SQL injection bug which may allow an attacker to steal the passwords hashes of any user of this forum, including the forum administrator. Once he has the password hashes, he can easily setup a brute-force attack to crack the users passwords and then impersonate them. If the administrator password is obtained, an attacker may even edit the content of this website. Solution: Upgrade to XMB Forum 1.8 SP1 or newer Risk factor : Medium
Referencia Cruzada:	BugTraq ID: 7406
Copyright	This script is Copyright (C) 2003 Renaud Deraison