Secunia Advisory: SA10447 Print Advisory
Release Date: 2003-12-16

Critical: Moderately critical
Impact: Manipulation of data
Where: From remote

Software: Invision Power Top Site List 1.x


Description:
JeiAr has reported a vulnerability in Invision Power Top Site List, which potentially can be exploited by malicious people to manipulate data through HTTP.

The problem is that the "offset" parameter isn't properly validated. This can potentially be used to manipulate SQL queries.

Invision Power Top Site List 1.1 has been reported vulnerable.

Solution:
This vulnerability will be fixed in the next version.

Provided and/or discovered by:
Reported by JeiAr.

Source: Secunia

OS/2-eCS-ArcaOS General News

More in General  

OS/2-eCS-ArcaOS Software News

More in Software  

Latest Forum Posts

Site News

More in Site News