vendor:
Downline Builder
by:
Hussin X
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Downline Builder
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Downline Builder( id ) Remote SQL Injection Vulnerability
The vulnerability exists due to insufficient filtration of user-supplied input passed via the 'id' parameter to the 'tr.php' script. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Successful exploitation allows to read arbitrary data from the database, including passwords.
Mitigation:
Input validation should be used to prevent SQL injection attacks.
