ID de Prueba:	1.3.6.1.4.1.25623.1.0.803033
Categoría:	Web application abuses
Título:	SonicWall Viewpoint <= 6.0 SP2 SQLi Vulnerability - Active Check
Resumen:	SonicWall Viewpoint is prone to an SQL injection (SQLi); vulnerability.
Descripción:	Summary: SonicWall Viewpoint is prone to an SQL injection (SQLi) vulnerability. Vulnerability Insight: Input passed to 'scheduleID' parameter in 'sgms/reports/scheduledreports/configure/scheduleProps.jsp' page is not properly verified before being used in SQL queries. Vulnerability Impact: Successful exploitation will let attackers to manipulate SQL queries by injecting arbitrary SQL code. Affected Software/OS: SonicWALL Viewpoint version 6.0 SP2 and prior. Solution: Apply SonicWALL Viewpoint hotfix 104767 from the referenced advisory. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5169 BugTraq ID: 49906 http://www.securityfocus.com/bid/49906 Bugtraq: 20111002 SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability (Google Search) http://www.securityfocus.com/archive/1/519983/100/0/threaded http://www.sonicwall.com/app/projects/file_downloader/document_lib.php?t=RN&id=379 http://www.vulnerability-lab.com/get_content.php?id=196
Copyright	Copyright (C) 2012 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.