CGI abuses : INL ulog-php SQL injection

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.14363

Categoría: CGI abuses

Título: INL ulog-php SQL injection

Resumen: NOSUMMARY

Descripción: Description:

The remote host is running ulog-php, a firewall log analysis interface
written in PHP.

There is a SQL injection vulnerability in the remote interface, in the
file port.php, which may allow an attacker to insert arbitrary SQL statements
in the remote database. An attacker may exploit this flaw to add bogus
statements in the remote log database, or to remove arbitrary log entries
from the database, thus cleaning his tracks.

Solution : Upgrade to ulog-php 0.8.2 or newer
Risk factor: High

Referencia Cruzada: BugTraq ID: 11018

Copyright This script is Copyright (C) 2004 Tenable Network Security

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.14363
Categoría:	CGI abuses
Título:	INL ulog-php SQL injection
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is running ulog-php, a firewall log analysis interface written in PHP. There is a SQL injection vulnerability in the remote interface, in the file port.php, which may allow an attacker to insert arbitrary SQL statements in the remote database. An attacker may exploit this flaw to add bogus statements in the remote log database, or to remove arbitrary log entries from the database, thus cleaning his tracks. Solution : Upgrade to ulog-php 0.8.2 or newer Risk factor: High
Referencia Cruzada:	BugTraq ID: 11018
Copyright	This script is Copyright (C) 2004 Tenable Network Security