Summary
The host is running AstroSPACES, and is prone to SQL Injection Vulnerability.
Impact
Successful attack could lead to application compromise or access or modify the data.
Impact Level: Application
Solution
No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore.
General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.
Insight
The flaw is due to input passed to the id parameter in profile.php file is not properly sanitised before being used in SQL queries.
Affected
AstroSPACES 1.1.1 and prior on all running platform.
References
Severity
Classification
-
CVE CVE-2008-4642 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Apache Tomcat/JBoss EJBInvokerServlet / JMXInvokerServlet (RMI over HTTP) Marshalled Object Remote Code Execution
- Artmedic Kleinanzeigen File Inclusion Vulnerability
- Adobe ColdFusion Authentication Bypass Vulnerability
- Arkeia Appliance Path Traversal Vulnerability
- Apache Struts2 Showcase Skill Name Remote Code Execution Vulnerability