XeoPort ‘Index.PHP’ SQL注入漏洞

XeoPort 0.81及可能早期版本的index.php脚本存在SQL注入漏洞，远程攻击者可借助xp_body_text参数执行任意SQL命令。

来源: BID

名称: 20475

Hyperlink:http://www.securityfocus.com/bid/20475

来源: BUGTRAQ

名称: 20061012 XeoPort <= 0.81 SQL Injection Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/448424/100/0/threaded

来源: FULLDISC

名称: 20061012 XeoPort <= 0.81 SQL Injection Vulnerability

Hyperlink:http://marc.theaimsgroup.com/?l=full-disclosure&m=116062269104422&w=2

来源: XF

名称: xeoport-index-sql-injection(29479)

Hyperlink:http://xforce.iss.net/xforce/xfdb/29479

来源: SECTRACK

名称: 1017055

Hyperlink:http://securitytracker.com/id?1017055

来源: SREASON

名称: 1735

Hyperlink:http://securityreason.com/securityalert/1735