Test ID:	1.3.6.1.4.1.25623.1.0.902029
Category:	Web application abuses
Title:	AudiStat <= 1.3 Multiple Vulnerabilities - Active Check
Summary:	AudiStat is prone to multiple vulnerabilities.
Description:	Summary: AudiStat is prone to multiple vulnerabilities. Vulnerability Insight: Input passed to the 'year', 'month' and 'mday' parameters in index.php are not properly sanitised before being returned to the user or before being used in the sql queries. Vulnerability Impact: Successful exploitation could allow the attackers to inject arbitrary SQL code, execute arbitrary HTML and script code on the vulnerable system. Affected Software/OS: AudiStat version 1.3 and prior. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1050 http://www.exploit-db.com/exploits/11334 http://packetstormsecurity.org/1002-exploits/audistats-sql.txt http://secunia.com/advisories/38494 Common Vulnerability Exposure (CVE) ID: CVE-2010-1051 Common Vulnerability Exposure (CVE) ID: CVE-2010-1052
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.