header-logo
Suggest Exploit
vendor:
Ziyaretci Defteri
by:
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Ziyaretci Defteri
Affected Version From: 2
Affected Version To:
Patch Exists: No
Related CWE:
CPE: a:berthanas:ziyaretci_defteri:2.0
Metasploit:
Other Scripts:
Platforms Tested:

Berthanas Ziyaretci Defteri SQL Injection Vulnerability

The Berthanas Ziyaretci Defteri web application is vulnerable to SQL Injection attacks. This vulnerability occurs because user-supplied data is not properly sanitized before being used in an SQL query. An attacker can exploit this vulnerability to compromise the application, access or modify data, or exploit other latent vulnerabilities in the underlying database.

Mitigation:

To mitigate this vulnerability, developers should implement proper input validation and sanitization techniques, such as using prepared statements or parameterized queries, to prevent SQL Injection attacks.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/25109/info

Berthanas Ziyaretci Defteri is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Berthanas Ziyaretci Defteri 2.0 is affected; other versions may also be vulnerable. 

To demonstrate this issue, use the following string for both the username and password of the vulnerable script:

' OR '1'='1

Navigation

Suggest Exploit

Services By CQR