vendor:
BuzzyWall
by:
~!Dok_tOR!~
8.8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: BuzzyWall
Affected Version From: 1.3.2001
Affected Version To: 1.3.2001
Patch Exists: NO
Related CWE: N/A
CPE: a:buzzscripts:buzzywall
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
BuzzyWall <= 1.3.1 SQL Injection Vulnerability
A SQL injection vulnerability exists in BuzzyWall version 1.3.1. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable application. This can allow the attacker to gain access to sensitive information such as login credentials, user data, etc. The vulnerability is due to the application not properly sanitizing user-supplied input.
Mitigation:
Ensure that user-supplied input is properly sanitized and validated before being used in SQL queries.
