• IDP Daily Update #1320
  posted: 12/01/08
  
• NSM Daily Update #1320
  posted: 12/01/08
  
• Deep Inspection 5.3r5 and above, 5.4, 6.0 #1320
  posted: 12/01/08
  
• Deep Inspection 5.1, 5.2, 5.3r4 and below #1300
  posted: 12/01/08
  
• Deep Inspection 5.0 #1132
  posted: 04/01/08
  
• Antivirus
  posted: 11/30/08

Text Size:        

• Product Information
• Security Products Overview
• Juniper Networks ISG Series
• IDP Demo
• Product Poster & Z-Card 

Title: Web Directory Script 'listing_view.php' SQL Injection Vulnerability

Severity: MODERATE

Description:

Web Directory Script is a web-based classifieds application. It is implemented in PHP.

The application is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data to the 'name' parameter of the 'listing_view.php' script before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Web Directory Script 2.0 is vulnerable to this issue; other versions may also be affected.

Affected Products:

• Web Directory Script Web Directory Script 2.0

References:

• Web Directory Script: Web Directory Script