Detections
Analytics

FreeBSD : glpi -- SQL Injection (2ffb1b0d-ecf5-11dd-abae-00219b0fc4d8)

high Nessus Plugin ID 35469

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

The GLPI project reports :

Input passed via unspecified parameters is not properly sanitised before being used in SQL queries. This can be exploited to manipulateSQL queries by injecting arbitrary SQL code.

Solution

Update the affected package.

See Also

http://glpi-project.org/spip.php?page=annonce&id_breve=161&lang=en

https://dev.indepnet.net/glpi/ticket/1224

https://mail.gna.org/public/glpi-news/2009-01/msg00002.html

http://www.nessus.org/u?be52847a

Plugin Details

Severity: High

ID: 35469

File Name: freebsd_pkg_2ffb1b0decf511ddabae00219b0fc4d8.nasl

Version: 1.14

Type: Local

Published: 1/28/2009

Updated: 1/6/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:glpi

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 1/28/2009

Vulnerability Publication Date: 1/25/2009

Reference Information

Secunia: 33680