Intrusion Prevention


This indicates an attack attempt against a SQL Injection vulnerability in ICloudCenter's ICJobSite web application.
The vulnerability may allow an attacker to inject arbitrary SQL statements into a vulnerable system. This is possible because the user input filters fail to properly sanitize the "pid" parameter value that is passed to "index.php". An attacker may include SQL statements by supplying an injection string through the URL and a good string through a GET request.

Affected Products

ICloudCenter ICJobSite 1.1


System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

CVE References