ID de Prueba:	1.3.6.1.4.1.25623.1.0.56758
Categoría:	CGI abuses
Título:	E107 SQL Injection Vulnerability
Resumen:	NOSUMMARY
Descripción:	Description: The remote host, according to the version number, has a vulnerable version of e107 web content management software installed. The flaw allows attackers to perform SQL injection attacks via cookies that are insufficiently sanitized, allowing easy access to administrative functions. Versions up to and including 0.7.2 are vulnerable. Solution : Upgrade to a later version. http://e107.org Risk factor : High CVSS Score: 5.1
Referencia Cruzada:	BugTraq ID: 17966 Common Vulnerability Exposure (CVE) ID: CVE-2006-2416 http://www.securityfocus.com/bid/17966 Bugtraq: 20060513 SQL-Injection in e107 allows attacker to become a site admininstrator (Google Search) http://www.securityfocus.com/archive/1/433938/100/0/threaded http://www.osvdb.org/25521 http://secunia.com/advisories/20089 http://securityreason.com/securityalert/905 http://www.vupen.com/english/advisories/2006/1802 XForce ISS Database: e107-cookie-sql-injection(26434) https://exchange.xforce.ibmcloud.com/vulnerabilities/26434
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.