This application requires Javascript for optimal performance.

Adobe.RoboHelp.Server.SQL.Injection

Release Date

Aug 20, 2009

Severity

medium

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against a SQL injection vulnerability in Adobe RoboHelp Server.

The vulnerability is caused by an error when the vulnerable software handles a specially crafted HTTP request. It allows a remote attacker to execute arbitrary SQL statements.

Affected Products

Adobe RoboHelp Server 7
Adobe RoboHelp Server 6

Recommended Actions

Apply patch, available from the web site:

http://www.adobe.com/support/security/bulletins/downloads/apsb08-16.zip

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2008-2991

Reference/s

http://www.securityfocus.com/bid/30137 (BugTraq)
http://www.frsirt.com/english/advisories/2008/2026 (FrSIRT)

Reference: VID-17627