ID de Prueba:	1.3.6.1.4.1.25623.1.0.18289
Categoría:	Web application abuses
Título:	JGS-XA JGS-Portal <= 3.0.2 Multiple XSS and SQLi Vulnerabilities - Active Check
Resumen:	The remote version of JGS-Portal contains an input validation; flaw leading multiple SQL injection and XSS vulnerabilities.
Descripción:	Summary: The remote version of JGS-Portal contains an input validation flaw leading multiple SQL injection and XSS vulnerabilities. Vulnerability Impact: An attacker may exploit these flaws to execute arbitrary SQL commands against the remote database and to cause arbitrary code execution for third party users. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1633 Bugtraq: 20050516 [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05) (Google Search) http://marc.info/?l=bugtraq&m=111627681218415&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2005-1634 Common Vulnerability Exposure (CVE) ID: CVE-2005-1635
Copyright	Copyright (C) 2005 Josh Zlatin-Amishav

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.