vendor:
724CMS Enterprise
by:
cyberlog
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: 724CMS Enterprise
Affected Version From: 4.59
Affected Version To: 4.59
Patch Exists: N/A
Related CWE: N/A
CPE: 724cms:enterprise:4.59
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
Discovered in 2020
724CMS Enterprise Version 4.59 SQL Injection Vulnerability
A SQL injection vulnerability exists in 724CMS Enterprise Version 4.59. An attacker can send a maliciously crafted HTTP request to the vulnerable server, which can allow the attacker to execute arbitrary SQL commands on the underlying database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Additionally, parameterized queries should be used to prevent SQL injection attacks.
