vendor:
Countdown Standart Rückwärts Auktions System
by:
Easy Laster
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Countdown Standart Rückwärts Auktions System
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
phpscripte24 Countdown Standart Rückwärts Auktions System SQL Injection Vulnerability
A vulnerability exists in phpscripte24 Countdown Standart Rückwärts Auktions System, which allows an attacker to inject malicious SQL code into the vulnerable application. This can be exploited to gain access to the database and extract sensitive information such as passwords. The vulnerability is triggered when an attacker sends a specially crafted HTTP request containing malicious SQL code to the vulnerable application.
Mitigation:
Ensure that all user-supplied input is properly sanitized and validated before being used in SQL queries. Use parameterized queries to prevent SQL injection attacks.
