vendor:
PHP Classifieds Ads
by:
BorN To K!LL - h4ck3r
7,5
CVSS
HIGH
Blind-Injection
89
CWE
Product Name: PHP Classifieds Ads
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
N/A
PHP CLASSIFIEDS ADS
The PHP Classifieds Ads application is vulnerable to Blind-Injection. An attacker can inject malicious SQL queries into the 'sid' parameter of the 'detail.php' page. This can be used to extract sensitive information from the database.
Mitigation:
Input validation should be used to prevent malicious SQL injection attacks.
