vendor:
Berty Forum
by:
ajann
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Berty Forum
Affected Version From: 1.4
Affected Version To: 1.4
Patch Exists: NO
Related CWE: N/A
CPE: a:berty_forum:berty_forum:1.4
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Berty Forum <= 1.4(index.php) Remote Blind SQL Injection Exploit
Berty Forum <= 1.4(index.php) is vulnerable to a blind SQL injection vulnerability. An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable application. This can allow the attacker to gain access to sensitive information stored in the database, such as user credentials and other confidential data.
Mitigation:
To mitigate this vulnerability, the application should use parameterized queries and input validation to ensure that user-supplied data is properly sanitized.
