Test ID:	1.3.6.1.4.1.25623.1.0.11548
Category:	CGI abuses
Title:	bttlxeForum SQL injection
Summary:	NOSUMMARY
Description:	Description: The remote host is running bttlexeForum, a set of CGIs designed to run a forum-based web server on a Windows platform. There is a SQL injection bug in the remote server which allowed Nessus to log in as 'administrator' by supplying the password 'or id=' An attacker may use this flaw to impersonate users on this host (potentially making the webmaster legally liable for the impersonations) or gain the control of the remote SQL database Solution : http://www.battleaxesoftware.com/forums/forum.asp?forumid=36&select=1812 Risk factor : High
Cross-Ref:	BugTraq ID: 7416 Common Vulnerability Exposure (CVE) ID: CVE-2003-0215 Bugtraq: 20030424 SQL injection in BttlxeForum (Google Search) http://marc.info/?l=bugtraq&m=105120052725940&w=2 http://securitytracker.com/id?1006632
Copyright	This script is Copyright (C) 2003 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.