Nessus Plugin #12042

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

SQL injection in ReviewPost PHP Pro

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2004 Astharot

Summary:

SQL Injection

Version:

$Revision: 1.5 $

Cve_id:

-

Bugtraq_id:

9574, 12159

Xrefs:

-

Description:

The remote host could be vulnerable to SQL Injection, because
you are probably running ReviewPost PHP Pro, a web-based software
that manage users opinions.

There is a flaw in this software which may allow a malicious
attacker to inject arbitrary SQL queries which allows it to
fetch data from the database.

Solution : Download the vendor supplied patch at
http://www.photopost.com/members/forum/showthread.php?s=&threadid=98098

Risk factor : High