BaconMap is prone to a local file-include vulnerability and an SQL- injection vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory- traversal strings to view and execute arbitrary local files within the context of the webserver process. Information harvested may aid in further attacks. The attacker can exploit the SQL-injection vulnerability to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass the authentication control. BaconMap 1.0 is vulnerable other versions may also be affected.

• http://baconmap.nmsu.edu/
• https://www.securityfocus.com/bid/43908

---

Updated on 2015-03-25