vendor:
T-Dreams Cars Ads Package
by:
R4dc0re
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: T-Dreams Cars Ads Package
Affected Version From: 2.0
Affected Version To: 2.0
Patch Exists: NO
Related CWE: N/A
CPE: a:t-dreams:t-dreams_cars_ads_package
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
T-Dreams Cars Ads Package SQL injection Vulnerability
The vulnerability exists in the T-Dreams Cars Ads Package, which allows an attacker to inject malicious SQL queries via the 'key' parameter in the 'processview.asp' script. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Sanitize all user-supplied input to prevent malicious code from being executed.
