Hola
He estado escaneando con SSS una página Web, y parece ser que este agradable programa privativo de Safety Labs ha encontrado algunos bug's
La cosa es que no se muy bien como podría aprovecharme deestos, ¿Alguien me da ideas?
*********************************
FTP Servers : FTP Bruteforce
Port 21
Description FTP Server has problem with bruteforce attack.
How to fix Upgrade to the current version of your FTP Server.
Risk level Medium
CVE GENERIC-MAP-NOMATCH
*********************************
CGI Scripts : Bluo index.php SQL Injection Vulnerability
Port 80
Description Bluo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.Bluo 1.2 is vulnerable; other versions may also be affected.
How to fix Upgrade to the current version of Bluo.
Risk level Medium
Related Links Bluo Homepage
Script
http://www.salesianosatocha.com/index.php? CVE CVE-MAP-NOMATCH
Bugtraq ID 32522
Thanks
Mostrar Mensajes
