This application requires Javascript for optimal performance.

AdMentor.Admin.SQL.Injection

Release Date

Jan 05, 2012

Severity

high

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt to exploit a SQL Injection vulnerability in ASPCode.net AdMentor.

The vulnerability is a result of the application's failure to properly sanitize user input before using it in a SQL query. As a result, a remote attacker can send a crafted query to execute SQL commands on a vulnerable server.

Affected Products

ASPCode.net AdMentor 0

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

Coverage

IPS
VCM

Reference/s

http://www.securityfocus.com/bid/22281 (BugTraq)

Reference: VID-30539