Intrusion PreventionMontala.Limited.ResourceSpace.user_functions.php.SQL.Injection
Description
This indicates an attack attempt to exploit an SQL Injection Vulnerability in Montala Limited ResourceSpace.
The vulnerability is due to an input validation error when processing the parameter passed to check_access_key_collection function in the user_functions.php endpoint. A remote, unauthenticated attacker may exploit this vulnerability by sending maliciously crafted HTTP packets. Successful exploitation could result in the information disclosure which could be used subsequently by the attacker to perform arbitrary code execution.
Affected Products
Montala Limited ResourceSpace 9.6 and prior
Impact
System Compromise: Remote attackers can add, view, delete or modify data in the database of the affected application
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.resourcespace.com/versions
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 51184 |
| Created | Feb 03, 2022 |
| Updated | Mar 31, 2022 |
| Risk |
|
| CVE ID | CVE-2021-41765 |
| Exploit Prediction Score | 4.68% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |