Sql injection

2009-09-3015:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.5%

JSON

SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CPENameOperatorVersion
bplawyercasedocumentseq1.0

CPE	Name	Operator	Version
	bplawyercasedocuments	eq	1.0

References

antisecurity.org/bplawyercasedocument-1-0-mssql-vulnerabilities.antisecurity

secunia.com/advisories/36796

www.vupen.com/english/advisories/2009/2733