GateSoft Docusafe 'ECO.asp' SQL Injection Vulnerability

GateSoft Docusafe is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sql injection

SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ECOID parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4736

GateSoft DocuSafe 4.1.0 and 4.1.2 are affected by an SQL injection in ECO.asp, exploitable via the ECO_ID parameter. Multiple sources (NVD, OpenVAS) corroborate a vulnerability allowing remote execution of arbitrary SQL commands through that parameter. The underlying issue is a flaw in input hand...

PT-2011-1686

Name of the Vulnerable Software and Affected Versions GateSoft DocuSafe versions 4.1.0 through 4.1.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ECO ID parameter in the "ECO.asp" file. Recommendations For GateSoft DocuSafe versions 4.1...

CVE-2010-4736: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ECOID parameter. NOTE: some of these details are obtained from third party information...