header-logo
Suggest Exploit
vendor:
Family Connections
by:
Not specified
7.5
CVSS
HIGH
Blind SQL Injection
Not specified
CWE
Product Name: Family Connections
Affected Version From: Version 1.9 and below
Affected Version To: Version 1.9
Patch Exists: NO
Related CWE: Not specified
CPE: Not specified
Metasploit:
Other Scripts:
Platforms Tested: Not specified
Not specified

Blind SQL Injection Exploit

This exploit is for a blind SQL injection vulnerability in the Family Connections CMS version 1.9 and below. The vulnerability allows an attacker to inject SQL queries through the 'member' GET variable. The exploit takes advantage of the vulnerability to extract sensitive information from the database.

Mitigation:

Upgrade to a version of Family Connections CMS higher than 1.9 to patch the vulnerability.
Source

Exploit-DB raw data: