Easy.Hosting.Control.Panel.SQL.Injection

Description

This indicates an attack attempt against a SQL Injection vulnerability in Easy Hosting Control Panel (EHCP).
The vulnerability is due to inadequate filtering of the X-Forwarded-For value. A remote attacker may be able to exploit this to execute arbitrary SQL commands within the system.

Affected Products

Easy Hosting Control Panel (EHCP) 0.38.5.b and before.

Impact

System Compromise: Remote attackers can access or modify data in the database of the affected application

Recommended Actions

Upgrade to Easy Hosting Control Panel (EHCP) 0.38.5.
http://www.ehcp.net/

References