ID de Prueba:	1.3.6.1.4.1.25623.1.0.800143
Categoría:	Web application abuses
Título:	SePortal poll.php SQL Injection Vulnerability
Resumen:	SePortal is prone to an SQL injection (SQLi) vulnerability.
Descripción:	Summary: SePortal is prone to an SQL injection (SQLi) vulnerability. Vulnerability Insight: Input passed to the poll_id parameter in poll.php and to sp_id parameter in staticpages.php files are not properly sanitised before being used in an SQL query. Vulnerability Impact: Successful attack could lead to execution of arbitrary SQL queries. Affected Software/OS: SePortal Version 2.4 and prior on all running platform. Solution: Upgrade to SePortal Version 2.5 or later CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5191 BugTraq ID: 29996 http://www.securityfocus.com/bid/29996 BugTraq ID: 66315 http://www.securityfocus.com/bid/66315 https://www.exploit-db.com/exploits/5960 http://secunia.com/advisories/30865 http://securityreason.com/securityalert/4623 XForce ISS Database: seportal-poll-sql-injection(43450) https://exchange.xforce.ibmcloud.com/vulnerabilities/43450
Copyright	Copyright (C) 2008 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.