Intrusion PreventionICloudCenter.ICJobSite.pid.Parameter.SQL.Injection
Description
This indicates an attack attempt against a SQL Injection vulnerability in ICloudCenter's ICJobSite web application.
The vulnerability may allow an attacker to inject arbitrary SQL statements into a vulnerable system. This is possible because the user input filters fail to properly sanitize the "pid" parameter value that is passed to "index.php". An attacker may include SQL statements by supplying an injection string through the URL and a good string through a GET request.
Affected Products
ICloudCenter ICJobSite 1.1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Currently we are not aware of any vendor supplied patch for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 29312 |
| Created | Sep 20, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2011-1557 |
| Exploit Prediction Score | 0.15% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |