vendor:
Marinet cms
by:
CoBRa_21
8,8
CVSS
HIGH
SQL/XSS/HTML Injection
89, 79, 80
CWE
Product Name: Marinet cms
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
Marinet cms SQL/XSS/HTML Injection Vulnerability
Marinet cms is vulnerable to SQL/XSS/HTML Injection. An attacker can inject malicious SQL/XSS/HTML code in the vulnerable parameters of the Marinet cms application. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code, to disclose sensitive information from the database, to execute arbitrary HTML code, to bypass authentication and authorization mechanisms, to perform unauthorized actions, etc.
Mitigation:
Input validation, parameterized queries, and proper output encoding should be used to prevent SQL/XSS/HTML Injection.
