Test Kennung:	1.3.6.1.4.1.25623.1.0.14816
Kategorie:	CGI abuses
Titel:	aspWebCalendar SQL Injection
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host appears to be running aspWebCalendar, an ASP script designed to faciliate the integration of multiple calendars in a web-based application. There is a flaw in the remote software which may allow anyone to inject arbitrary SQL commands, which may in turn be used to gain administrative access on the remote host. Solution : Upgrade to the latest version of this software Risk factor : High
Querverweis:	BugTraq ID: 11246 Common Vulnerability Exposure (CVE) ID: CVE-2004-1553 http://www.securityfocus.com/bid/11246 BugTraq ID: 30996 http://www.securityfocus.com/bid/30996 Bugtraq: 20040923 aspWebCalendar /aspWebAlbum: SQL injection (Google Search) http://marc.info/?l=bugtraq&m=109604910025090&w=2 https://www.exploit-db.com/exploits/6357 https://www.exploit-db.com/exploits/6420 http://osvdb.org/47913 http://osvdb.org/47914 http://secunia.com/advisories/31649 XForce ISS Database: aspwebalbum-album-sql-injection(44877) https://exchange.xforce.ibmcloud.com/vulnerabilities/44877 XForce ISS Database: aspwebalbum-image-file-upload(44876) https://exchange.xforce.ibmcloud.com/vulnerabilities/44876 XForce ISS Database: aspwebalbum-sql-injection(17507) https://exchange.xforce.ibmcloud.com/vulnerabilities/17507 Common Vulnerability Exposure (CVE) ID: CVE-2004-1552 BugTraq ID: 23098 http://www.securityfocus.com/bid/23098 https://www.exploit-db.com/exploits/3546 http://secunia.com/advisories/12651 http://secunia.com/advisories/24622 http://www.vupen.com/english/advisories/2007/1093 XForce ISS Database: aspwebcalendar-calendar-sql-injection(33157) https://exchange.xforce.ibmcloud.com/vulnerabilities/33157 XForce ISS Database: aspwebcalendar-sql-injection(17506) https://exchange.xforce.ibmcloud.com/vulnerabilities/17506
Copyright	This script is Copyright (C) 2004 Tenable Network Security

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.