vendor:
SiAdmin
by:
Ihsan Sencan
9
CVSS
CRITICAL
SQL Injection
89
CWE
Product Name: SiAdmin
Affected Version From: 1.1
Affected Version To: 1.1
Patch Exists: NO
Related CWE:
CPE: a:bubul:siadmin:1.1
Platforms Tested: WiN7_x64, KaLiLinuX_x64
2018
SiAdmin 1.1 – ‘id’ SQL Injection
The SiAdmin 1.1 application is vulnerable to SQL injection. An attacker can exploit this vulnerability by sending a specially crafted HTTP GET request to the target server. This allows the attacker to execute arbitrary SQL queries and potentially gain unauthorized access to the database.
Mitigation:
To mitigate this vulnerability, it is recommended to sanitize user input and use parameterized queries or prepared statements to prevent SQL injection attacks.