vendor:
com_adds
by:
DevilZ TM
7,5
CVSS
HIGH
Blind SQL Injection
89
CWE
Product Name: com_adds
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
Joomla Component com_adds Blind SQL Injection Vulnerability
An attacker can exploit this vulnerability by sending a specially crafted SQL query to the vulnerable parameter 'catid' in the URL. The query will be executed in the backend database, allowing the attacker to extract data from the database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Sanitize user input and use parameterized queries.
