vendor:
Mod Members Bewerb
by:
Sina Yazdanmehr (R3d.W0rm)
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Mod Members Bewerb
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
PHP-Fusion Mod Members Bewerb Sql Injection
A vulnerability exists in PHP-Fusion Mod Members Bewerb, which allows an attacker to inject arbitrary SQL commands via the 'sortby' parameter in the 'members.php' script. An attacker can exploit this vulnerability to gain access to sensitive information from the database, modify data, or exploit further vulnerabilities in the underlying SQL server software.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Sanitize user input and use parameterized queries.
