vendor:
Family Connections
by:
Not specified
7.5
CVSS
HIGH
Blind SQL Injection
Not specified
CWE
Product Name: Family Connections
Affected Version From: Version 1.9 and below
Affected Version To: Version 1.9
Patch Exists: NO
Related CWE: Not specified
CPE: Not specified
Platforms Tested: Not specified
Not specified
Blind SQL Injection Exploit
This exploit is for a blind SQL injection vulnerability in the Family Connections CMS version 1.9 and below. The vulnerability allows an attacker to inject SQL queries through the 'member' GET variable. The exploit takes advantage of the vulnerability to extract sensitive information from the database.
Mitigation:
Upgrade to a version of Family Connections CMS higher than 1.9 to patch the vulnerability.