ID de Prueba:	1.3.6.1.4.1.25623.1.0.801733
Categoría:	Web application abuses
Título:	Redaxscript Path Disclosure and SQL Injection Vulnerabilities
Resumen:	Redaxscript is prone to path disclosure and SQL injection vulnerabilities.
Descripción:	Summary: Redaxscript is prone to path disclosure and SQL injection vulnerabilities. Vulnerability Insight: The flaws are due to - Error in the '/templates/default/index.php', which reveals the full path of the script. - Input passed to the 'id' and 'password' parameters in '/includes/password.php' is not properly sanitised before being returned to the user. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database. Affected Software/OS: Redaxscript version 0.3.2. Solution: Upgrade to Redaxscript version 0.3.2a or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5313 https://www.htbridge.com/advisory/HTB22804 Common Vulnerability Exposure (CVE) ID: CVE-2011-5314
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.