vendor:
DomainSale PHP Script
by:
Ihsan Sencan
N/A
CVSS
N/A
SQL Injection
89
CWE
Product Name: DomainSale PHP Script
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: N/A
Related CWE: N/A
CPE: a:codester:domainsale_php_script:1.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: WiN7_x64/KaLiLinuX_x64
2017
DomainSale PHP Script 1.0 – SQL Injection
The vulnerability allows an attacker to inject sql commands into the vulnerable parameter 'id' of the domain.php script. An example of the exploit is provided in the proof of concept section.
Mitigation:
Input validation should be used to prevent SQL injection attacks.
