Rule:--Sid:2325--Summary:This event is generated when an attempt is made to exploit a known vulnerability in Virtual Programming VP-ASP web application running on a server.--Impact:Information gathering and system integrity compromise. Possible unauthorizedadministrative access to the server or application. Possible executionof arbitrary code of the attackers choosing in some cases.--Detailed Information:This event is generated when an attempt is made to exploit a known vulnerability in Virtual Programming VP-ASP web application running on aserver. It may be possible to use SQL injection techniques to supplySQL code of an attackers choosing to the database used in theapplication.--Affected Systems:	Virtual Programming VP-ASP 4.0	Virtual Programming VP-ASP 5.0--Attack Scenarios:An attacker can inject SQL code of their choosing to view and manipulatedata stored in the underlying database used by the application.--Ease of Attack:Simple. Exploit software is not required.--False Positives:None known.--False Negatives:None known.--Corrective Action:Ensure the system is using an up to date version of the software and hashad all vendor supplied patches applied.--Contributors:Sourcefire Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:--