7 lines
No EOL
502 B
Text
7 lines
No EOL
502 B
Text
source: http://www.securityfocus.com/bid/5859/info
|
|
|
|
SurfControl SuperScout WebFilter Reports Server is prone to SQL injection attacks. This issue is due to insufficient input validation on the part of some of the reports files, which are implemented as .dlls.
|
|
|
|
As a consequence, remote attackers are able to modify the logic of SQL queries. This may result in database corruption or disclosure of sensitive information.
|
|
|
|
http://reports-server:8888/SimpleBar.dll/RunReport ?...<various parameters> |