ID de Prueba:	1.3.6.1.4.1.25623.1.0.902088
Categoría:	Web application abuses
Título:	Event Horizon < 1.1.11 Multiple Vulnerabilities
Resumen:	Event Horizon is prone to multiple vulnerabilities.
Descripción:	Summary: Event Horizon is prone to multiple vulnerabilities. Vulnerability Insight: The flaw exists due to the improper validation of user supplied data to 'YourEmail' and 'VerificationNumber' parameters to 'modfile.php' script. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary HTML and script code and manipulate SQL queries by injecting arbitrary SQL code in a user's browser session in context of an affected site. Affected Software/OS: Event Horizon version 1.1.10 and prior. Solution: Update to version 1.1.11 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2854 http://secunia.com/advisories/40517 Common Vulnerability Exposure (CVE) ID: CVE-2010-2855 BugTraq ID: 41580 http://www.securityfocus.com/bid/41580
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.