Re: [ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: [ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability
From: tiha@xxxxxxxxxxxx
Date: Tue, 31 Mar 2009 02:07:13 -0600
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

A fix has been done on this problem, one can no longer pass sql scripts and 
validation is done to ensure that the jobid actually exist before executing of 
and sql script

Prev by Date: aspWebCalendar Free Edition bug
Next by Date: Cisco ASA5520 Web VPN Host Header XSS
Previous by thread: [ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability
Next by thread: [ MDVSA-2009:050-1 ] python-pycrypto
Index(es):
- Date
- Thread