The calendar section of Aleris Software Systems is vulnerable to SQL injection attacks.
394a23b4c354be7744741be4da6eb6a53556c1c79698b1c9077efe03a8dee658
http://www.alerisdata.com/articles/home.asp
There exists an SQL injection vulnerability within the calendar section of a Aleris Software Systems web publisher. It seems thats Aleris uses this same calendar with every site they make that utilizes the publisher.
www.example.com/calendar/page.asp?mode=1%20union%20all%20select%201,2,3,4,5,6%20FROM%20users--
I reported this to aleris and am awaiting a response. No fix yet.
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed