SQL injection vulnerability in Entrans

Vulnerability ID: HTB22608 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinentrans1.html Product: Entrans Vendor: Khader Abbeb N http://sourceforge.net/projects/entrans/ Vulnerable Version: 0.3.2 and Probably Prior Versions Vendor Notification: 13 September 2010 Vulnerabilit...

Multiple Vulnerabilities in Entrans

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Entrans which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Entrans: CVE-2010-4932 The vulnerability exists due to input sanitation erro...