ID de Prueba:	1.3.6.1.4.1.25623.1.0.16389
Categoría:	Web application abuses
Título:	ASPjar Guestbook SQLi Vulnerability
Resumen:	ASPJar's GuestBook is prone to an SQL injection (SQLi) vulnerability).
Descripción:	Summary: ASPJar's GuestBook is prone to an SQL injection (SQLi) vulnerability). Vulnerability Insight: The remote version of this software is vulnerable to a SQL injection vulnerability which allows a remote attacker to execute arbitrary SQL statements against the remote DB. It is also vulnerable to an input validation vulnerability which may allow an attacker to perform a cross site scripting attack using the remote host. Solution: Delete this application. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0423 BugTraq ID: 12521 http://www.securityfocus.com/bid/12521 Bugtraq: 20050210 ASPjar guestbook (Injection in login page) (Google Search) http://marc.info/?l=bugtraq&m=110809687921701&w=2 http://secunia.com/advisories/14225/ XForce ISS Database: aspjar-guest-login-sql-injection(19299) https://exchange.xforce.ibmcloud.com/vulnerabilities/19299
Copyright	Copyright (C) 2005 Noam Rathaus

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.