vendor:
Cameralife
by:
BackDoor
8.8
CVSS
HIGH
SQL Injection and XSS
89, 79
CWE
Product Name: Cameralife
Affected Version From: 2.6.2b4
Affected Version To: 2.6.2b4
Patch Exists: YES
Related CWE: N/A
CPE: a:cameralife:cameralife:2.6.2b4
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Cameralife 2.6.2b4 (SQL/XSS) Multiple Remote Vulnerabilities
Cameralife 2.6.2b4 is vulnerable to a remote SQL injection and XSS attack. An attacker can exploit the vulnerability by sending a specially crafted URL to the target application. The URL contains a malicious SQL query which can be used to extract sensitive information from the database. The attacker can also inject malicious JavaScript code into the application which can be used to steal user credentials or perform other malicious activities.
Mitigation:
The application should be patched to the latest version and input validation should be implemented to prevent malicious input from being accepted.
