Test ID:	1.3.6.1.4.1.25623.1.0.801733
Category:	Web application abuses
Title:	Redaxscript Path Disclosure and SQL Injection Vulnerabilities
Summary:	Redaxscript is prone to path disclosure and SQL injection vulnerabilities.
Description:	Summary: Redaxscript is prone to path disclosure and SQL injection vulnerabilities. Vulnerability Insight: The flaws are due to - Error in the '/templates/default/index.php', which reveals the full path of the script. - Input passed to the 'id' and 'password' parameters in '/includes/password.php' is not properly sanitised before being returned to the user. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary queries to the database, compromise the application, access or modify sensitive data, or exploit various vulnerabilities in the underlying SQL database. Affected Software/OS: Redaxscript version 0.3.2. Solution: Upgrade to Redaxscript version 0.3.2a or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5313 https://www.htbridge.com/advisory/HTB22804 Common Vulnerability Exposure (CVE) ID: CVE-2011-5314
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.