vendor:
Webspell 4.2.x dailyinput Movie-Addon
by:
Easy Laster
7,5
CVSS
HIGH
SQL Injection
N/A
CWE
Product Name: Webspell 4.2.x dailyinput Movie-Addon
Affected Version From: Webspell 4.2.x
Affected Version To: Webspell 4.2.x
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2012
Webspell 4.2.x dailyinput Movie-Addon SQL Injection Vulnerability
dailyinput Movie-Addon is a Addon for the Webspell Web Application the Content Management System. In this Addon we found a Remote SQL Injection vulnerability.The Movie file is Vulnerable and a high risk Bug.The Vulnerability is Not fixed from the coder.The most Webspell Webapplication has a Security System in the Webspell core self.You must bypass the core from Webspell Security System (globalskiller).
Mitigation:
No fix.
