Test ID:	1.3.6.1.4.1.25623.1.0.16389
Category:	Web application abuses
Title:	ASPjar Guestbook SQLi Vulnerability
Summary:	ASPJar's GuestBook is prone to an SQL injection (SQLi) vulnerability).
Description:	Summary: ASPJar's GuestBook is prone to an SQL injection (SQLi) vulnerability). Vulnerability Insight: The remote version of this software is vulnerable to a SQL injection vulnerability which allows a remote attacker to execute arbitrary SQL statements against the remote DB. It is also vulnerable to an input validation vulnerability which may allow an attacker to perform a cross site scripting attack using the remote host. Solution: Delete this application. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0423 BugTraq ID: 12521 http://www.securityfocus.com/bid/12521 Bugtraq: 20050210 ASPjar guestbook (Injection in login page) (Google Search) http://marc.info/?l=bugtraq&m=110809687921701&w=2 http://secunia.com/advisories/14225/ XForce ISS Database: aspjar-guest-login-sql-injection(19299) https://exchange.xforce.ibmcloud.com/vulnerabilities/19299
Copyright	Copyright (C) 2005 Noam Rathaus

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.