vendor:
My link trader
by:
Dawid Morawski
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: My link trader
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Kali Linux 2016.2
2017
My link trader – SQL Injection
My link trader is vulnerable to SQL Injection. The vulnerable parameter is 'id' which can be exploited by passing malicious SQL queries in the URL. This can be used to extract sensitive information from the database.
Mitigation:
Input validation should be used to prevent SQL Injection attacks. Parameterized queries should be used to prevent malicious SQL queries from being executed.
