Information about /scripts/toos/mkilog.exe

From: César González (secat_private)
Date: Tue Jul 31 2001 - 04:48:26 PDT

  • Next message: Mads Rasmussen: "Re: Rational Requisite Web shows location of projects in html"

    Hello all,
    
    I am making a penetration testing, and some vulnerability scanners alert 
    about the script mkilog.exe. Most exactly nessus said the following :
    
        The CGI /scripts/tools/mkilog.exe is present.
     
        This CGI allows an attacker to view and modify SQL database
        contents.
    
    No securityfocus links, CVE advisory, etc. i have search most popular 
    security search engines but nothing appears. Any help will be appreciated.
    
    Regards.
    
    
    César González.
    Eureka Sistemas S.L.
    C/ San Fernando 16 bajo
    Santander 39010
    Spain
    http://www.eureka-sistemas.com/
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Tue Jul 31 2001 - 09:36:01 PDT