vendor:
Software
by:
JaMbA
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Software
Affected Version From: None
Affected Version To: None
Patch Exists: NO
Related CWE: None
CPE: None
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: win10
2017
Starting Page- SQL Injection
Vulnerable Parametre: linkid. An attacker can inject malicious SQL code into the linkid parameter of the outgoing.php page, allowing them to gain access to the underlying database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in an SQL query.
