Nessus Plugin #11139

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

wpoison (nasl version)

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2002 John Lampe...j_lampe@bellsouth.net

Summary:

Some common SQL injection techniques

Version:

$Revision: 1.22 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

This script attempts to use SQL injection techniques on CGI scripts
More info at : http://www.securiteam.com/securityreviews/5DP0N1P76E.html


Solution : Modify the relevant CGIs so that they properly escape arguments.

Risk factor : High