This host is running MyAuth3 Gateway and is prone SQL injection vulnerability.

Successful exploitation will allow remote attackers to view, add, modify or delete information in the back-end database. Impact Level: Application

Vendor has released a patch to fix the issue, please contact the vendor for patch information. For updates refer to http://www.tmsoft.com.br/index.php

The flaw exists due to the error in 'index.php', which fails to sufficiently sanitize user-supplied input via 'pass' parameter before using it in SQL query.

MyAuth3 Gateway version 3.0

• http://doie.net/?p=578
• http://www.exploit-db.com/exploits/17805/

---

Updated on 2017-03-28