Intrusion Prevention

ICloudCenter.ICJobSite.pid.Parameter.SQL.Injection

Description

This indicates an attack attempt against a SQL Injection vulnerability in ICloudCenter's ICJobSite web application.
The vulnerability may allow an attacker to inject arbitrary SQL statements into a vulnerable system. This is possible because the user input filters fail to properly sanitize the "pid" parameter value that is passed to "index.php". An attacker may include SQL statements by supplying an injection string through the URL and a good string through a GET request.

Affected Products

ICloudCenter ICJobSite 1.1

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

CVE References

CVE-2011-1557