vendor:
Text Link Sales
by:
ZoRLu
7.5
CVSS
HIGH
SQL Injection & XSS
89, 79
CWE
Product Name: Text Link Sales
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
turnkeyforms Text Link Sales Remote Sql inj & xss
A vulnerability exists in turnkeyforms Text Link Sales, which allows an attacker to inject arbitrary SQL commands and execute XSS attacks. This is due to the lack of proper input validation of the 'id' parameter in the 'admin.php' script. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable script. This can allow an attacker to gain access to the database and execute arbitrary SQL commands.
Mitigation:
Input validation should be performed on all user-supplied data to prevent SQL injection and XSS attacks.
