header-logo
Suggest Exploit
vendor:
Smart Vision Script News
by:
darkmasking
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Smart Vision Script News
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:
2010

Smart Vision Script News (newsdetail) SQL Injection Exploit

The Smart Vision Script News (newsdetail) is vulnerable to SQL Injection. An attacker can exploit this vulnerability to execute arbitrary SQL commands on the target system.

Mitigation:

Apply proper input validation and parameterized queries to prevent SQL Injection attacks.
Source

Exploit-DB raw data: