vendor:
CMS
by:
^Xecuti0n3r
7.5
CVSS
HIGH
Blind SQL Injection
89
CWE
Product Name: CMS
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2011
Bedder CMS Blind SQL Injection Vulnerability
Bedder CMS is vulnerable to Blind SQL Injection. An attacker can inject malicious SQL queries into the vulnerable parameter of the application. This can be exploited to gain access to the database and extract sensitive information such as usernames and passwords. The vulnerable parameter can be identified by sending a request with a true and false condition. If the application responds differently to the two requests, then the parameter is vulnerable to SQL injection.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries. Additionally, parameterized queries should be used to prevent SQL injection.
