ID de Prueba:	1.3.6.1.4.1.25623.1.0.15453
Categoría:	CGI abuses
Título:	DUware multiple vulnerabilities
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is running a product published by DUware - either DUclassmate, DUclassified or DUforum. There is a flaw in the remote version of this software which may allow an attacker to execute arbitrary SQL statements on the remote host by supplying malformed values to the arguments of /admin/, messages.asp or messagesDetails.asp. Solution : Upgrade the newest version of this software Risk factor : High
Referencia Cruzada:	BugTraq ID: 11363 Common Vulnerability Exposure (CVE) ID: CVE-2004-2202 http://www.securityfocus.com/bid/11363 http://www.osvdb.org/10668 http://www.osvdb.org/10669 http://www.securitytracker.com/alerts/2004/Oct/1011596.html XForce ISS Database: duclassified-multiple-sql-injection(17685) https://exchange.xforce.ibmcloud.com/vulnerabilities/17685 Common Vulnerability Exposure (CVE) ID: CVE-2004-2201 http://www.osvdb.org/10664 http://www.osvdb.org/10665 http://www.osvdb.org/10666 http://www.securitytracker.com/alerts/2004/Oct/1011595.html XForce ISS Database: duforum-sql-injection(17680) https://exchange.xforce.ibmcloud.com/vulnerabilities/17680 Common Vulnerability Exposure (CVE) ID: CVE-2004-2200 http://www.osvdb.org/10667 XForce ISS Database: duforum-xss(17681) https://exchange.xforce.ibmcloud.com/vulnerabilities/17681 Common Vulnerability Exposure (CVE) ID: CVE-2004-2199 XForce ISS Database: duclassified-message-xss(17686) https://exchange.xforce.ibmcloud.com/vulnerabilities/17686 Common Vulnerability Exposure (CVE) ID: CVE-2004-2198 http://www.osvdb.org/10663 http://www.securitytracker.com/alerts/2004/Oct/1011597.html XForce ISS Database: duclassmate-password-modification(17682) https://exchange.xforce.ibmcloud.com/vulnerabilities/17682
Copyright	This script is Copyright (C) 2004 Tenable Network Security

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.