vendor:
DB[CMS]
by:
CoBRa_21
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: DB[CMS]
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
DB[CMS] (section.php) SQL Injection Vulnerability
A SQL injection vulnerability exists in DB[CMS] (section.php) which allows an attacker to execute arbitrary SQL commands on the vulnerable system. The vulnerability is caused due to the user input not being properly sanitized before being used in an SQL query.
Mitigation:
The vulnerability can be patched by sanitizing the user input.
