Gajim SQL Injection and Code Execution Vulnerabilities

Gajim is prone to an SQL-injection vulnerability and a code-execution vulnerability because it fails to sufficiently sanitize user-supplied data.

Successfully exploiting these issues may allow an attacker to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or execute arbitrary code in the context of the application.


 

Privacy Statement
Copyright 2010, SecurityFocus