vendor:
E-Ticaret V3 Sanal Pos
by:
Ahmet Ümit BAYRAM
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: E-Ticaret V3 Sanal Pos
Affected Version From: v3
Affected Version To: v3
Patch Exists: NO
Related CWE: N/A
CPE: a:web_ofisi:e-ticaret_v3_sanal_pos
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Kali Linux
2019
Web Ofisi E-Ticaret 3 – ‘a’ SQL Injection
Web Ofisi E-Ticaret 3 is prone to a SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this vulnerability to manipulate SQL queries by injecting arbitrary SQL code. This may allow the attacker to access or modify data in the back-end database, compromise the application, access or elevate privileges, or execute arbitrary commands on the operating system.
Mitigation:
Input validation and output encoding should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in an SQL query. Output encoding should be used to prevent malicious code from being executed in the user's browser.
