ID de Prueba:	1.3.6.1.4.1.25623.1.0.901088
Categoría:	Web application abuses
Título:	Valarsoft Webmatic Multiple XSS and SQL Injection Vulnerabilities
Resumen:	Valarsoft Webmatic is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities.
Descripción:	Summary: Valarsoft Webmatic is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities. Vulnerability Insight: - Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. - Certain unspecified input is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Vulnerability Impact: Successful exploitation will let the attacker cause Cross-Site Scripting or SQL Injection attacks by executing arbitrary codes within the context of the affected application. Affected Software/OS: Valarsoft Webmatic prior to 3.0.3 Solution: Upgrade to Valarsoft Webmatic version 3.0.3. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4379 BugTraq ID: 37335 http://www.securityfocus.com/bid/37335 http://secunia.com/advisories/37735 Common Vulnerability Exposure (CVE) ID: CVE-2009-4380
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.