PT-2001-2359 · Mysql Server+1 · Mysql Server+1

Publicado 2001-12-25 · Atualizado 2008-09-05 · CVE-2001-1226

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AdCycle versions 1.17 and earlier

Description The issue allows remote attackers to modify SQL queries. These queries are not properly sanitized before being passed to the MySQL database.

Recommendations For AdCycle versions 1.17 and earlier, update to a version later than 1.17 to resolve the issue. As a temporary workaround, consider implementing proper sanitization of SQL queries to prevent modification by remote attackers.

Correção

Identificadores relacionados

CVE-2001-1226

Produtos afetados

Adcycle

Mysql Server

Referências · 4

• http://securityfocus.com/archive/1/247126 · Aviso do Fabricante
• http://securityfocus.com/bid/3741 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1226 · Nota de Segurança
• http://iss.net/security_center/static/7762.php · Aviso do Fabricante