ID de Prueba:	1.3.6.1.4.1.25623.1.0.801584
Categoría:	Web application abuses
Título:	PHP 'set_magic_quotes_runtime()' SQL Injection Vulnerability
Resumen:	PHP is prone to an SQL injection vulnerability.
Descripción:	Summary: PHP is prone to an SQL injection vulnerability. Vulnerability Insight: The flaw is due to an error in 'set_magic_quotes_runtime()' when the MySQLi extension is used, which fails to properly interact with use of the 'mysqli_fetch_assoc()' function. Vulnerability Impact: Successful exploitation could allow local attackers to conduct SQL injection attacks via crafted input that had been properly handled in earlier versions. Affected Software/OS: PHP version 5.3.2 to 5.3.3. Solution: Update to PHP 5.3.5 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4700 BugTraq ID: 46056 http://www.securityfocus.com/bid/46056 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12620 XForce ISS Database: php-setmagicquotesruntime-sql-injection(64964) https://exchange.xforce.ibmcloud.com/vulnerabilities/64964
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.