vendor:
Pre Multi-Vendor Shopping Malls
by:
G4N0K
8.8
CVSS
HIGH
Insecure Cookie Handling, SQL Injection
79, 89
CWE
Product Name: Pre Multi-Vendor Shopping Malls
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Pre Multi-Vendor Shopping Malls Multiple Vulnerabilities
Pre Multi-Vendor Shopping Malls is vulnerable to insecure cookie handling and SQL injection. An attacker can inject malicious code into the cookie and gain access to the admin panel. An attacker can also inject malicious SQL code into the buyer_detail.php page to gain access to the admin credentials.
Mitigation:
Ensure that all user input is properly sanitized and validated before being used in SQL queries. Use parameterized queries to prevent SQL injection.
