Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Atarone Version 1.2.0 Multiple Input Validation Vulnerabilities

Atarone is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include multiple cross-site scripting issues, multiple SQL-injection issues, and a local file-include issue.

Exploiting these issues can allow an attacker to steal cookie-based authentication credentials, view local files within the context of the webserver, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks may also be possible.

Atarone 1.2.0 is vulnerable; other versions may also be affected.







 

Privacy Statement
Copyright 2009, SecurityFocus